LIVE · cybersecurity feed
Live wire
CVE-2026-88779 · Citrix NetScaler Flaw Exploited Before CVE PublicationCVE-2026-88779 · NetScaler CVE-2026-88779 Exploited Before PublicationCVE-2022-28368 · dompdf_project dompdf XSS flaw added to VulnCheck KEVCVE-2026-88771 · Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploitedWarlock Ransomware Still Exploits Year-Old SharePoint Flaws to Hit Critical InfrastructureShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group MembersChina-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM PhishingCVE-2026-7273 · Zyxel GS1900 Switch Flaw Exploited, Now in EU CatalogueCVE-2026-102489 · Zammad Session Fixation Vulnerability Exploited Same Day as DisclosureCVE-2026-102490 · Zammad GmbH Zammad Vulnerability Exploited Same Day as Publication
patch

New infosec products of the week: October 2, 2026

Several cybersecurity vendors have unveiled new products and platform updates, with a notable emphasis on integrating artificial intelligence into security operations and access control, as well as enhancing software protection. The releases include Vega II, Genea MCP, BlackFog ADX Vision 2.0, and Thales Sentinel Envelope Plus.

ZeroDay News ·

Source: Help Net Security

Several cybersecurity vendors have unveiled new products and platform updates, with a notable emphasis on integrating artificial intelligence into security operations and access control, as well as enhancing software protection. The releases include Vega II, Genea MCP, BlackFog ADX Vision 2.0, and Thales Sentinel Envelope Plus.

Vega has launched Vega II, described as its most significant platform update since the company's emergence from stealth. This new version integrates advanced AI specifically trained for security operations centers (SOCs). Key features include the ability for security teams to maintain a persistent record of learned information and the removal of traditional SIEM and data pipeline obstacles that previously restricted access to critical data.

Genea has introduced Genea MCP, a Model Context Protocol server designed to directly link AI agents with the Genea Access Control platform. This integration aims to streamline access control tasks, allowing actions such as onboarding new employees, setting up temporary contractor access, or unlocking specific areas to be performed using simple commands rather than multiple manual steps. Genea states it is among the first access control providers to offer a native MCP server.

BlackFog has released ADX Vision 2.0, an expansion of its AI security offerings. This update is designed to help organizations manage and control the use of both generative and agentic AI throughout the enterprise. ADX Vision 2.0 incorporates seven distinct layers of protection, specifically engineered to detect prompt injection attempts and other forms of malicious or manipulated prompts.

Thales has announced Sentinel Envelope Plus, an enhancement to its existing Sentinel Envelope software protection solution. This new addition is engineered to substantially strengthen compiled applications against various advanced threats. These threats include AI-assisted reverse engineering, automated discovery of zero-day vulnerabilities, and automated exploit generation.

patchai
ShareXLinkedInWhatsAppFacebook

More News

view all →
patch

Three questions a hospital CISO should ask a healthcare fintech vendor

A cybersecurity expert has outlined key questions hospital CISOs should pose to healthcare fintech vendors to assess their security posture, particularly concerning patient data and financial transactions. Drew McCombs, who holds both CTO and CISO roles at Cylerity, emphasizes that security should be an integral part of development processes, not an afterthought, especially when patient data…

breach

Frontline Education Breach Impacts K-12 School District Staff

Frontline Education, a prominent software provider for K-12 school districts in the United States, has confirmed a data breach that exposed the personal information of school staff. The incident, which was discovered on August 14, 2026, stemmed from a vulnerability in a third-party software product utilized by the company.

vulnerability

Google halts open-source bug bounty program amid AI spam surge

Google has temporarily suspended submissions for product vulnerabilities to its Open Source Software Vulnerability Rewards Program (OSS VRP), effective October 1, 2026. The company cited a significant increase in automated submissions, most of which were deemed invalid, as the reason for the pause.

ai

Apple tightens macOS disk access as AI agents become more powerful

Apple is implementing stricter controls for Full Disk Access in macOS, citing an increased risk to user privacy from increasingly capable and autonomous AI agents. The company indicated that future macOS versions will require users to take explicit steps to grant applications this permission. A specific rollout date and the precise mechanics of these new controls have not yet been detailed.

nation-state

doxx.net opens Agentic Defined Networking public beta, raises $38 million

doxx.net has launched the public beta of its Agentic Defined Networking (ADN) platform, which enables users and their AI agents to establish private, secure networks and communicate without intermediary servers. The company also announced it has secured $38 million in Series A funding, led by Andreessen Horowitz, with additional participation from Animo Ventures and Focal.vc. As part of the…

vulnerability

AI slop submissions force Google to freeze its open-source bug bounty

Google has temporarily halted its Open Source Software Vulnerability Reward Program (OSS VRP) for new product vulnerability submissions, effective October 1, 2026. The company cited a substantial increase in automated, AI-generated reports, most of which were invalid, as the reason for the pause. This influx of low-quality submissions overwhelmed the engineers and open-source maintainers…