LIVE · cybersecurity feed
Live wire
Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScalerCVE-2026-19478 · Critical GitLab Flaw Exploited Shortly After DisclosureCVE-2026-32475 · Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code8,539 reasons to rethink how vulnerabilities get patched'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllersNSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technologyUS warns of AI-powered attacks on Siemens PLCs in critical infrastructureCVE-2024-39943 · Operation CameraSwarm Compromised 14,000+ Dahua CamerasCVE-2026-19490 · CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler GatewayA California county wants to hire Tina Peters to help run its elections
ai

Tufin expands Unified Control Plane with AI intelligence and multi-vendor automation

Tufin has announced the availability of Tufin Orchestration Suite (TOS) 5.3, helping enterprises further simplify security operations and maintain consistent control across increasingly complex multi-vendor, hybrid environments. As enterprise security environments continue to expand across cloud, firewalls, SASE, SD-WAN, microsegmentation, and distributed infrastructure, organizations increasingly

zeroday.news ·

Tufin has announced the release of Tufin Orchestration Suite (TOS) 5.3, an update designed to enhance security operations and maintain consistent control across complex, multi-vendor hybrid environments. The new version expands Tufin's Unified Control Plane with additional integrations, AI-powered intelligence, and automation capabilities.

The company states that the update aims to address the challenges enterprises face in governing connectivity across a growing array of vendor-specific tools, including cloud, firewalls, SASE, SD-WAN, and microsegmentation. Research cited by Tufin indicates that nearly half of organizations manage more than 20 security tools, contributing to fragmented governance and slower policy changes.

A key component of the release is the new AI-powered Segmentation Intelligence solution. This tool continuously analyzes an organization's segmentation policies to understand their intent, identify policy gaps and drift, and recommend corrective actions. Tufin asserts that this solution provides continuous visibility, replacing periodic audits and manual checks to help security teams proactively address potential flaws or neglected coverage areas.

TOS 5.3 also introduces several new capabilities to expand its multi-vendor network security platform. These include enhanced AWS Firewall Support, which provides native topology, policy, and compliance visibility for AWS-native firewall environments, extending governance deeper into cloud infrastructure.

The update also offers expanded Palo Alto Strata Cloud Manager Support, enabling end-to-end automation of IP-based access requests from initiation through provisioning. For VMware environments, the release adds NSX-T Access Request Automation, which automates access requests for Distributed Firewall rules, even in environments with incomplete network topology visibility.

Furthermore, Tufin has included Cisco Meraki Provisioning Support, extending automated policy provisioning to Cisco Meraki deployments. This aims to broaden consistent policy management across branch and distributed enterprise networks.

Tufin emphasizes that these updates are intended to reduce manual effort, accelerate policy changes, and apply consistent governance across heterogeneous environments, all powered by its Dynamic Network Connectivity Graph. The company's goal is to provide an intelligent control layer for understanding connectivity, governing change, and maintaining continuous security posture control across various environments, irrespective of the vendor.

aicloud
ShareXLinkedInWhatsAppFacebook

More News

view all →
malware

AI agent suggested installing a malware package. Engineer almost took its advice

Fortunately, the company had a policy of checking source code on GitHub first

ai

AI is making fraud harder to spot and identity harder to prove

Online fraud has become a routine concern for consumers and businesses that rely on digital accounts, payments and customer service. Experian’s 2026 U.S. Identity & Fraud Report describes a market where scams extend across messages, websites, documents, voices, images and account activity. Security measures that make consumers feel most secure (Source: Experian) Deception spreads across digital ch

CVE-2026-19478critical

Critical GitLab Flaw Exploited Shortly After Disclosure

CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data. The post Critical GitLab Flaw Exploited Shortly After Disclosure appeared first on SecurityWeek.

security

US charges 17 Iranian hackers over 31-terabyte academic data theft

The U.S. has charged 17 alleged members of Mabna Institute, an Iranian hacking-for-hire company accused of running a years-long campaign that stole data from American universities, companies, and government agencies. The post US charges 17 Iranian hackers over 31-terabyte academic data theft appeared first on Help Net Security.

CVE-2026-32475critical

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution. The vulnerability, tracked as CVE-2026-32475, carries a CVSS score of 9.0 out of 10.0. It has been described as a case of unrestricted upload of a file with a dangerous type. "The flaw lives in the Forms module's File

security

Researchers find a loophole that lets expired credit cards make unauthorized payments

A team from the University of Massachusetts Amherst has shown that a contactless credit card keeps working past its printed expiration date, even after the cardholder gets a replacement. They named it the Zombie Card attack and presented the findings at USENIX Security 2026. The question behind the loophole “This work is motivated by documented patterns of improper expired card handling. Although