Nogosee Intelligence

AI Security, Cloud Security, Incidents & Breaches, Security Operations

Trend Micro Unveils TrendAI Brand and Anthropic Partnership to Drive Autonomous Security Operations

May 13, 2026

Trend Micro has launched ‘TrendAI,’ a new corporate brand integrating Anthropic’s Claude models into its Vision One platform. The partnership aims to shift cybersecurity from reactive ‘If/Else’ logic to autonomous AI agents capable of prioritizing threats and automating incident response. This initiative addresses the escalating speed of AI-driven attacks by providing high-speed governance and automated reporting.

Microsoft Launches Real-Time Data Loss Prevention for Copilot Prompt Inputs

May 13, 2026

Microsoft has released a significant security update for Microsoft 365 Copilot, introducing real-time Data Loss Prevention (DLP) for prompt inputs. The feature uses Microsoft Purview to detect and block sensitive information—such as credit card numbers or internal project codes—from being processed by the AI, preventing accidental data leakage while maintaining operational productivity.

Securing AI Infrastructure: Defending Against LLM Jacking and New Security Frameworks

May 13, 2026

Organizations must transition from treating AI security as a niche concern to integrating it into core IT governance. By adopting ‘Cyber for AI’ strategies, teams can defend against threats like LLM Jacking—where attackers hijack model resources—using strict API management and newly released NIST and CISA guidelines designed to secure large language model environments.

Oracle Releases Critical Patch Update Addressing 481 Vulnerabilities Across Java and Enterprise Suites

May 13, 2026May 13, 2026

Oracle has issued its April 2026 Critical Patch Update, delivering 481 security fixes across its product portfolio. The update addresses several high-risk vulnerabilities in Java SE and GraalVM, some of which allow unauthenticated network-based attacks. Organizations are urged to apply these patches immediately to mitigate risks of unauthorized code execution and service disruptions.

Exploiting Human Logic: The Rise of ‘MFA Fatigue’ and Password Manager Social Engineering

May 13, 2026

Modern cyber threats are shifting focus from breaking encryption to manipulating user behavior through psychological fatigue. New tactics target the friction between automated security tools and manual user intervention, specifically exploiting the ‘MFA fatigue’ phenomenon and the warning dialogs of password managers to trick users into authorizing unauthorized access or bypassing domain-matching security protocols.

Critical Microsoft ASP.NET Core Vulnerability Enables System Privilege Escalation

May 13, 2026

Microsoft has released urgent security updates for ASP.NET Core to address CVE-2026-40372, a critical elevation of privilege vulnerability. Flaws in cryptographic signature validation allow unauthenticated attackers to forge authentication cookies and gain SYSTEM-level access. The vulnerability primarily impacts non-Windows environments using the Data Protection package, requiring immediate patching of affected container and server deployments.

AI Shift Triggers 1,140% Identity Surge as Organizations Pivot to Non-Human Identity Governance

May 13, 2026

Okta’s ‘Businesses at Work 2026’ report reveals a massive 1,140% surge in access requests over two years, driven primarily by autonomous AI agents. This shift is forcing global enterprises to move beyond traditional user-centric security, prioritizing non-human identity (NHI) governance and phishing-resistant multi-factor authentication to secure modern cloud and hybrid infrastructure environments.

CrowdStrike Launches Project QuiltWorks to Counter AI-Driven Vulnerability Discovery

May 13, 2026

CrowdStrike has established Project QuiltWorks, an industry-wide coalition including OpenAI and IBM, to address the rapid discovery of software vulnerabilities by generative AI. The initiative integrates expert-led red teaming with frontier AI models to help organizations prioritize and remediate risks faster than automated exploitation tools can identify them, moving beyond traditional periodic security scanning.

CISA Expands KEV Catalog with ScreenConnect Path Traversal and Windows Shell Spoofing Vulnerabilities

May 13, 2026

CISA has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: a high-severity path traversal flaw in ConnectWise ScreenConnect and a Windows Shell spoofing vulnerability. Both flaws have confirmed active exploitation in the wild, requiring federal agencies and private organizations to prioritize patching to prevent unauthorized remote access and network-based identity spoofing.

Google Patches Critical Remote Code Execution Vulnerability in Android Wireless ADB

May 13, 2026May 13, 2026

Google has addressed a high-severity security flaw (CVE-2026-0073) in the wireless Android Debug Bridge (ADB) functionality. Affecting Android 14 and newer versions, the vulnerability allows nearby attackers to bypass authentication and execute code with shell privileges. Users should ensure their devices are updated to the May 2026 security patch level to mitigate risk.