Akira ransomware just killed EDR with a Safe Mode reboot An Akira ransomware affiliate forced a compromised Windows server into Safe Mode with Networking this month. The goal was simple: kill the endpoint agents. Huntress watched it happen — their own agent went dark, Microsoft Defender’s real-time protection vanished, and the attacker had a clean…
Zero Networks puts guardrails on AI agents at the network layer Most AI security tools focus on prompts and model outputs. Zero Networks does something different: they put the guardrails at the network layer, where a compromised agent hits a wall before it can move laterally. Least Agency gets real On Monday, Zero Networks launched…
Defused spotted it first: someone is actively exploiting a pre-auth sandbox escape in ServiceNow, tracked as CVE-2026-6875. ServiceNow patched it last week. The exploit code is public. And the attackers are already changing their methods faster than anyone expected. What happened Threat intel firm Defused reported on July 20 that CVE-2026-6875, a sandbox escape in…