ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Agility”

17 stories in the last 30d

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllIndustry 6Policy & legal 3AI industry 3Research 1Advisory 1Tools 1AI safety & security 1Data breach 1
SeverityAllcritical 1high 0medium 1low 0info 15

Agility’s new humanoid robot will stop, squat to avoid harming human coworkers

Agility Robotics unveils Digit 5 humanoid robot that autonomously stops, moves, or squats to avoid harming nearby human coworkers.

Agility Robotics announced Digit 5, its first humanoid robot designed to work safely near humans without isolation barriers, using a safe motion system that reacts to detected human presence by moving away, standing still, or squatting. Early access begins in H1 2027 with general availability by end of 2027. Previous Digit versions have logged over 65,000 working hours, with customers including GXO, Schaeffler, Amazon, and Toyota Motor Manufacturing Canada.

Ars Technica · AI · 1d agoAI industry

Agility Robotics says its new Digit 5 robot can work next to people without safety fences

Agility Robotics unveiled Digit 5, a humanoid warehouse robot that can work safely alongside people without fences, with deliveries from early 2027.

Agility Robotics announced Digit 5, a humanoid robot for warehouses and factories that uses AI and sensors to detect people and stop or step aside without safety fences. It lifts up to 22.7 kg (40% more than Digit 4), charges in 9 minutes for 90 minutes of runtime, and is the first partner for Nvidia's Halos robotics safety platform. Agility cites over $300 million in orders, with first deliveries in early 2027 and production capacity of up to 10,000 units per year in Salem, Oregon.

The Decoder · 1d agoAI industry

Oracle Corporation security advisory (AV26-929)

CCCS relays Oracle's September 2026 Critical Patch Update fixing vulnerabilities across WebLogic, Database, E-Business Suite, PeopleSoft, Siebel, and dozens more products.

The Canadian Centre for Cyber Security (AV26-929) relays Oracle's September 2026 Critical Security Patch Update, which addresses vulnerabilities in dozens of product families as of September 15, 2026. Affected products include Oracle WebLogic Server, Database Server, E-Business Suite, Fusion Middleware, PeopleSoft Enterprise, Siebel Applications, GraalVM, VirtualBox, Coherence, and numerous banking and communications suites. The bulletin lists no CVE identifiers and encourages administrators to review Oracle's advisory and apply patches.

Canadian Centre for Cyber Security · 1h agoAdvisory 3 sources

Entrust turns cryptographic inventory data into security action

Entrust adds CBOM import/export, Ansible automation, and post-quantum readiness features to its Cryptographic Security Platform.

Entrust announced new capabilities for its Cryptographic Security Platform, including CBOM import/export to build cryptographic inventories, correlate assets and dependencies, and prioritize remediation of noncompliant or vulnerable crypto. New Ansible-based automation extends certificate lifecycle management across public and private PKI, while composite algorithm and SPIRE-based capabilities support phased post-quantum migration and trusted identities for AI agents. The platform is now deployable as-a-service or on-premises, aligning with DORA, NIS2, and recent U.S. post-quantum requirements.

Help Net Security · 2d agoTools

Post-quantum cryptography adoption and the national security implications

Opinion analysis argues quantum computing favors nation-state espionage, leaving lagging post-quantum adoption at critical infrastructure exposed to harvest-now-decrypt-later attacks.

A CSO Online opinion piece argues that the extreme cost and infrastructure requirements of quantum computers will concentrate cryptographically relevant quantum capability among nation-states and a few corporations, favoring espionage and economic espionage over criminal monetization. It highlights harvest-now-decrypt-later risk to long-lived secrets, expert warnings such as Filippo Valsorda's, and diverging CRQC timelines with Google suggesting possibly 2029. The piece predicts governments, banks, and targeted sectors will adopt PQC first while utilities, small hospitals, and local government lag, widening exploitable gaps in critical infrastructure reminiscent of Salt Typhoon-style access.

CSO Online · 7d agoIndustry

15 Minutes Saved Per Alert: How a Lean German Manufacturer Protects 10,000 Endpoints with ANY.RUN

A five-person security team at a German manufacturer protecting 10,000 endpoints cut triage time by 15 minutes per alert after adopting ANY.RUN's cloud sandbox.

Philipp Z., Security Lead at a leading German manufacturer, described how a five-person team protects 10,000 endpoints and users using ANY.RUN's Interactive Sandbox in a private cloud. The firm previously relied on a single air-gapped forensic laptop running Flare VM, which caused 5-10 minute setup delays, single-user bottlenecks, and selective triage. The switch reportedly saved roughly 15 minutes per alert and reduced forced wiping and reimaging of user machines. ANY.RUN data cited in the piece puts manufacturing security workloads 22% above other major industries.

ANY.RUN · 7d agoIndustry

What your vendor says about PQC tells you if they are ready

Allot CTO outlines a telecom post-quantum migration playbook: inventory crypto, deploy hybrid ML-KEM on TLS first, and avoid missed interfaces.

Dr. Yaakov Stein, VP CTO of Allot, explains how mobile operators should triage post-quantum migration by data shelf life, protecting subscriber identity mappings, billing records, and call metadata that stay sensitive for years. He recommends starting with a comprehensive crypto inventory, then hybrid ML-KEM key exchange on TLS-protected 5G SBA and management interfaces, followed by IPsec backhaul and roaming links. Stein warns that migrations most often fail operationally through missed legacy interfaces such as SSH, RADIUS, or forgotten load balancers, and cites the early Kyber multi-packet TLS client hello issue as an example of middlebox incompatibility.

Help Net Security · 15d agoIndustry

12 Best CIEM Tools Compared (2026): Features & Pricing

Buyer's guide compares twelve CIEM tools; Microsoft discontinued Entra Permissions Management, while Tenable (Ermetic), CyberArk, and Wiz lead the 2026 scorecard.

The scorecard evaluates twelve cloud infrastructure entitlement management vendors on permission analytics depth, JIT enforcement, non-human identity coverage, pricing predictability, and bundle leverage. Tenable (Ermetic) leads at 4.70, followed by CyberArk and Wiz, while Microsoft's retirement of Entra Permissions Management (CloudKnox) forces existing customers into migration cycles. Pricing structures span per-identity, per-resource, per-workload, credit-based, and quote-based models.

GBHackersupdated · 11h agofirst · 13h agoIndustry 14 sources

What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies

CISA officials outline future plans for the CDM program, emphasizing speed, automation, unified data, and data-driven federal risk management.

Speaking at an Elastic Federal Cyber Defense Breakfast, CISA officials described next steps for the Continuous Diagnostics and Mitigation (CDM) program that supplies cybersecurity tools to federal agencies. Acting deputy program manager Richard Grabowski named velocity, unification, and data-driven risk management as core goals, including a three-year roadmap to expand SIEM-as-a-Service. Federal CISO Mike Duffy urged aggregating demand across agencies, buying outcomes rather than products, and designing acquisition for continuous improvement. CISA's Matt House tied the program's evolution to post-SolarWinds needs for a government-wide common operating picture.

CyberScoop · 1d agoPolicy & legal

Beyond the Perimeter: Building Resilience Against Cloud and SaaS Supply-Chain Attacks

ShinyHunters exploited an Oracle PeopleSoft zero-day to steal data and extort roughly 100 organizations, including the Council of Europe, for up to $2.3M.

Between May and early June 2026, the ShinyHunters group exploited a critical zero-day in Oracle PeopleSoft across about 100 organizations and 300 instances worldwide, per reports cited by The Register. Stolen records included employee and student personal data, payroll, tax, financial and health information, plus immigration and passport documents. AgentCypher.ai estimates extortion demands of $400,000 to $2.3 million per victim, typically in Bitcoin; the Council of Europe refused to pay. The article uses the incident to argue for Zero Trust, supply-chain risk management, rapid patching, encrypted distributed backups and defined recovery-time objectives.

Cyber Security News · 4d agoData breach in the wild1

Maven Robotics wants to steal your robot deployment deal

Warehouse robotics startup Maven Robotics emerges from stealth with $100 million to build 250 third-generation palletizing robots.

Maven Robotics, founded in 2024 by former Apple special projects engineer Hamza Derbas and his brother Khalid, emerged from stealth after raising $100 million from RoboStrategy, LocalGlobe, Vine Ventures, and XTX Markets Ventures. Its wheeled dual-arm robots, moving 10 mph and lifting up to 30 kg, perform mixed palletizing in distribution centers, with up to eight units reportedly running 16 hours a day at 99%+ uptime. The company plans to build 250 third-generation robots, start design on a fourth-generation platform, and expand toward material handling and fabrication, positioning itself against rivals like Agility, which is going public via a $2.4 billion SPAC deal.

TechCrunch · AI · 6d agoAI industry

Getting ahead of ‘harvest-now-decrypt-later’: Post-quantum cryptography planning

Opinion piece urges organizations to begin post-quantum cryptography migration now, citing harvest-now-decrypt-later risk and NIST deadlines.

CSO Online outlines why harvest-now-decrypt-later makes long-lived sensitive data a current risk even before quantum computers exist. It cites NIST IR 8547 timelines deprecating RSA-2048 and ECC P-256 by 2030 and removing them by 2035, finalized FIPS standards ML-KEM, ML-DSA, and SLH-DSA, upcoming FN-DSA (FIPS 206), NSA requirements for national security systems from 2027, and UK NCSC phased guidance through 2035. The author recommends cryptographic discovery, crypto-agility, and prioritizing long-confidentiality data and TLS endpoints.

CSO Online · 6d agoResearch

CIA official touts agency’s Cyber Mission Center in capture of Venezuela’s Maduro

CIA deputy director credits the Cyber Mission Center's cyber operations for the intelligence picture behind Nicolás Maduro's capture.

CIA Deputy Director Michael Ellis said at the Billington Cybersecurity Summit that cyber operations built the 'flawless intelligence picture' enabling US special forces to locate Nicolás Maduro in his Caracas bunker and apprehend him within four minutes of landing during January's Operation Absolute Resolve. Director John Ratcliffe elevated the Center for Cyber Intelligence to a standalone mission center, which Ellis said smooths reporting chains and aligns resources. Ellis also said AI will 'permeate' every aspect of intelligence work, with human-in-the-loop safeguards and multi-vendor approaches to avoid model lock-in. The US has unsealed narcoterrorism charges against Maduro and his wife, who are seeking dismissal under immunity claims.

The Record · 8d agoPolicy & legal 2 sources

How to secure hybrid meeting rooms without sacrificing user experience

Sponsored Barco piece, citing IDC data, says security is now the top videoconferencing purchase criterion as NIS2 and Cyber Resilience Act compliance pressures mount.

The sponsored article cites IDC research showing security (31%) now outranks price (26%) and quality (25%) as the top videoconferencing purchase criterion. It highlights concerns like malware propagation (47%), missed patches (39%), and risky user behavior (37%), and references NIS2, the Cyber Resilience Act, the Radio Equipment Delegated Act, and ISO/IEC 27001. Barco ClickShare marketing director Yannic Laleeuwe argues security is now a prerequisite for market access and resilience, but warns that usability tradeoffs drive risky workarounds.

The Register · Security · 8d agoIndustry

The G7 tells industry to hurry up and prep for post-quantum encryption

A G7 working group report urges governments and industry to accelerate post-quantum cryptography migration, framing quantum risk as a near-term economic threat.

A cybersecurity working group formed at the June 2026 G7 Summit in France called on organizations to stop postponing migration of critical systems to post-quantum cryptography, warning that harvest-now-decrypt-later attacks against currently encrypted data exist today. The report was signed by CISA, the UK NCSC, France's ANSSI, Germany's BSI, Canada's CSE, Japan's NCO, and Italy's ACN. It also cautions that some NIST-selected PQC algorithms have already been broken on classical computers, reinforcing support for crypto-agility. The push aligns with a recent US executive order moving federal PQC migration timelines from 2035 to 2030, while Google and others target 2029.

CyberScoop · 13d agoPolicy & legal

Drowning in CVEs and thirsty for answers? Try CTEM

Sponsored Register piece argues traditional vulnerability management cannot scale with CVE volume and promotes Continuous Threat Exposure Management via Horizon3's NodeZero.

The sponsored article cites surging CVE volumes, CVSS triage shortcomings, NVD backlog, and AI-driven discovery accelerating an asymmetric vulnerability cycle. It outlines Gartner's five CTEM steps - scoping, discovery, prioritization, validation, and mobilization - and describes how Horizon3's NodeZero automated pentesting validates exploitable attack paths with evidence. Horizon3 says NodeZero uses a deterministic machine learning expert system rather than general LLMs, limiting generative AI to scoped tasks via AWS Bedrock.

The Register · Security · 13d agoIndustry

AI supply chain risk is showing up in developer workflows first

Zentera Systems CEO says AI supply chain attacks currently hit developer workflows first, advising segmentation over tooling and citing the Phantom Raven campaign.

In an interview, Zentera Systems CEO Dr. Jaushin Lee argues that most active AI supply chain incidents target developer workflows and open-source package repositories, while poisoned model weights, compromised MCP servers, and poisoned vector stores remain largely in research and demos. He cites the active 'Phantom Raven' campaign, where attackers register AI-hallucinated package names in public repositories with malicious payloads that silently infect vibe-coding build pipelines. He recommends software-defined segmentation, semiconductor-style project enclaves with egress controls, and warns that self-hosting models without agent sandboxing leaves exposure unchanged.

Help Net Security · 22d agoAI safety & security