Time for a digital divorce? Trade war puts spotlight on Canada's relationship with U.S. big tech

Tensions between Canada and the United States have raised concerns about Canada's digital sovereignty, but what does that term mean, and how can Canada promote it? Experts say it's about making sure Canada has tech alternatives and can effectively regulate al

Why Palo Alto Networks (PANW) Shares Are Trading Lower Today

What Happened? Shares of cybersecurity platform provider Palo Alto Networks (NASDAQ:PANW) fell 3% in the afternoon session after the company published a security advisory addressing a critical buffer overflow vulnerability in its PAN-OS software. The security

One HTTP Request, Every File on the Server: GitLab’s CVSS 10 Commits-API Flaw Hits Active Exploitation Within Hours

A single HTTP POST request to the /api/v4/projects/{id}/repository/commits/ endpoint is sufficient to bypass security controls and read arbitrary files from a GitLab server. This path traversal vulnerability, designated CVE-2026-85706, carries a CVSS score of

The Agent Security Reckoning: What to Watch at Dreamforce 2026

As the industry converges on San Francisco for Dreamforce 2026 this September 15-17, the conversation has shifted from the novelty of generative AI to the harsh reality of securing it. Blair’s Friday piece examined Dreamforce through the lens of governance-as

Salesforce introduces new AI agents to automate sales, support tasks

Salesforce Inc. today introduced a series of artificial intelligence agents designed to make sales and technical support teams more productive. The agents are rolling out alongside a new version of Agentforce Coworker, an automation tool built into several of

I keep hearing the same interpretation of the Cyber Resilience Act (CRA): when the CRA says that security updates must be provided free of charge, it means the enterprise open-source subscription mod

9to5Mac Overtime 081: iPhone Duo thoughts and impressions

Jeff and Fernando discuss their initial thoughts and impressions of the iPhone Duo, Apple’s first foldable smartphone. Sponsored by Bitwarden: Register for the free, virtual Open Source Security Summit on September 17, featuring cybersecurity leaders David

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure. The vulnerability in question is CVE-2026-85706 (CVSS score: 10.0), a path traversal issue in the repository commits AP

Anthropic Says Iran-Linked Actor Used Claude to Compile U.S. Navy Targeting Data

Anthropic says it disrupted an Iran-linked user that used its Claude artificial intelligence models to track U.S. naval forces, compile targeting material and research vulnerabilities in shipboard systems. The activity

sage v0.13.0

Safety for Agents Agent Detection & Response for AI coding assistants Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls shel

More JFrog Artifactory bugs under attack, and all 3 have patches

JFrog Artifactory instances continue to get hit hard. Multiple attackers are exploiting three JFrog Artifactory bugs to gain administrative control over vulnerable instances - in some cases, just days after the vendor published a patch - and then using this illicit access to install malicious plugin

Microsoft Smashes Patch Tuesday Record With 974 Security Fixes

Microsoft broke its previous Patch Tuesday record with yet another record-setter this week. September's Patch Tuesday will contain 974 total fixes, with 113 of them rated "Critical" for high likelihood of exploitation. So far this year, Microsoft has released