GoKawiil
Tech News
A Show HN post introduces AegisKernel, described as a zero-trust runtime that intercepts POSIX calls from AI agents in under 0.016 milliseconds. The demo page lets visitors trigger sample attack vectors to see the interceptor react in real time.
A Cloud Security Alliance survey conducted with Jazz found that 73% of organizations experienced at least one confirmed data loss incident in the past two years, and only 16% said their DLP tools blocked the most serious incident before data left the organization. The survey also found that while nearly half of security teams rank GenAI tools as their top exfiltration risk, fewer than a third can produce routine reports showing sensitive data sent to such tools, and only 22% strictly block GenAI-related data transfers.
The FBI has repeatedly flagged that North Korean IT workers are using fraudulent or stolen identity documents, proxy infrastructure and US-based facilitators to pass remote hiring processes and gain access to corporate networks. Rather than stealing existing credentials, these attackers get organizations to create new credentials for them during onboarding, exploiting the fact that Zero Trust and MFA controls assume an identity already exists. The FBI now recommends verifying identity both during hiring and continuously throughout remote employment.
9to5Mac's latest Security Bite roundup finds that ClickFix, a technique tricking victims into pasting Terminal commands themselves, has become the default delivery method for nearly all new Mac stealer malware since the Q1 2026 review. Researchers at Group-IB, Huntress, and Kaspersky have each identified new malware families—including ClickLock, a Go-based stealer, and a MacSync variant disguised as Homebrew—all using this same social-engineering approach. The report notes attackers are adding persistence, backdoors, and infrastructure hidden inside Apple's own services.
CISA released new guidance last week outlining how organizations can deploy deception techniques—such as decoy files, honeypots, and tripwires—to detect intruders inside their networks. The introductory resource explains how to design and implement these traps to shorten detection time and reveal attacker behavior, framing deception as a complement to zero-trust security models.
Zscaler reported fiscal fourth-quarter adjusted earnings of $1.19 per share on revenue of $898 million, topping Wall Street forecasts of $1.09 and $877 million respectively. Revenue climbed 25% year-over-year, and annual recurring revenue reached $3.77 billion, while the company's net loss narrowed to $3.4 million from $17.6 million a year earlier. CEO Jay Chaudhry credited demand for the company's Zero Trust cloud security architecture, including a new version built for AI agents, for the strong results.
Nutanix executive Oscar Wahlberg argues that securing autonomous AI agents requires a defense-in-depth approach spanning infrastructure, storage, compute, networking and a governing control plane, rather than relying on prompt-level guardrails alone. He explains that infrastructure security must first establish a verified identity and root of trust for any system granted execution privileges, since traditional application controls fail to stop an agent from misusing credentials or taking unintended destructive actions.