Blog – Page 593 – Cyber Mike

Researchers Disclose Google Gemini AI Flaws Allowing Prompt Injection and Cloud Exploits

Cybersecurity researchers have disclosed three now-patched security vulnerabilities impacting Google’s Gemini artificial intelligence (AI) assistant that, if successfully exploited, could have exposed users to major privacy risks and data theft.
“They made Gemini vulnerable to search-injection attacks on its Search Personalization Model; log-to-prompt injection attacks against Gemini Cloud

Microsoft Expands Sentinel Into Agentic Security Platform With Unified Data Lake

Microsoft on Tuesday unveiled the expansion of its Sentinel Security Incidents and Event Management solution (SIEM) as a unified agentic platform with the general availability of the Sentinel data lake.
In addition, the tech giant said it’s also releasing a public preview of Sentinel Graph and Sentinel Model Context Protocol (MCP) server.
“With graph-based context, semantic access, and agentic

Windows 11 KB5065789 update released with 41 changes and fixes

Microsoft has released the KB5065789 preview cumulative update for Windows 11 24H2, which includes 41 improvements, including new AI actions in File Explorer and bug fixes for Windows Update and Windows Sandbox. […]

Mondoo Raises $17.5 Million for Vulnerability Management Platform

Mondoo has raised more than $32 million in total, with the latest funding round led by HV Capital.

The post Mondoo Raises $17.5 Million for Vulnerability Management Platform appeared first on SecurityWeek.

CISO Conversations: John ‘Four’ Flynn, VP of Security at Google DeepMind

Flynn has been DeepMind’s VP of security since May 2024. Before then he had been a CISO with Amazon, CISO at Uber, and director of information security at Facebook.

The post CISO Conversations: John ‘Four’ Flynn, VP of Security at Google DeepMind appeared first on SecurityWeek.

Broadcom fixes high-severity VMware NSX bugs reported by NSA

Broadcom has released security updates to patch two high-severity VMware NSX vulnerabilities reported by the U.S. National Security Agency (NSA). […]

New Guidance Calls on OT Operators to Create Continually Updated System Inventory

Agencies in several countries have created guidance titled ‘Creating and Maintaining a Definitive View of Your OT Architecture’.

The post New Guidance Calls on OT Operators to Create Continually Updated System Inventory appeared first on SecurityWeek.

California Gov. Gavin Newsom Signs Bill Creating AI Safety Measures

The Transparency in Frontier Artificial Intelligence Act (TFAIA) requires AI companies to implement and disclose publicly safety protocols to prevent their most advanced models from being used to cause major harm.

The post California Gov. Gavin Newsom Signs Bill Creating AI Safety Measures appeared first on SecurityWeek.

High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenter

The flaws could allow attackers to escalate privileges, manipulate notifications, and enumerate usernames.

The post High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenter appeared first on SecurityWeek.

Stop Alert Chaos: Context Is the Key to Effective Incident Response

The Problem: Legacy SOCs and Endless Alert Noise
Every SOC leader knows the feeling: hundreds of alerts pouring in, dashboards lighting up like a slot machine, analysts scrambling to keep pace. The harder they try to scale people or buy new tools, the faster the chaos multiplies. The problem is not just volume; it is the model itself. Traditional SOCs start with rules, wait for alerts to fire,

Cyber News