Dell security advisory (AV26-414)
IBM security advisory (AV26-413)
A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting browsers, environment files, and cloud services. [...]
The overwhelming majority of stolen cryptocurrency today is being used to fund the Democratic People’s Republic of Korea (DPRK). Crypto theft is rampant because it’s easy. The system, bereft of...
A newly discovered Vietnamese-linked operation has been observed using a Google AppSheet as a “phishing relay” to distribute phishing emails with an aim to compromise Facebook accounts. The...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), alongside the Australian Cyber Security Centre and other international partners,... The post CISA and partners release agentic AI...
After four years of watching the war in Ukraine, NATO defense decision-makers are finally beginning to pour money into drones. The Iran conflict has drawn further attention to these investments....
China is not just modernizing its military. It is reimagining how future wars will be fought. The People’s Liberation Army’s (PLA’s) embrace of “intelligentized warfare” (智能化战争) reflects a...
Tom Parker, a security services lead at IBM with some two decades of experience in the cybersecurity industry, has emerged as a potential contender to lead the Cybersecurity and Infrastructure...
Cybersecurity firm Trellix disclosed a data breach after attackers gained access to "a portion" of its source code repository. [...]
An all-out race toward artificial general intelligence (AGI), driven by expectations that the first state to achieve AGI will enjoy an overwhelming and enduring first-mover advantage over its...
A vulnerability has been discovered in WHM, cPanel, and WP Squared that could allow for remote code execution. WHM, cPanel, and WP Squared are Linux-based web hosting control panels for server and...
The Defense Department has completed agreements with eight technology companies, including many of the industry’s biggest, to use their artificial-intelligence capabilities in classified settings,...
Following your foundation, operationalize Wiz across development, detection and response, and program maturity so your security program never stops getting stronger.
Following your foundation, operationalize Wiz across development, detection and response, and program maturity so your security program never stops getting stronger.
A coordinated international operation involving U.S. and Chinese authorities has arrested at least 276 suspects and shut down nine scam centers used for cryptocurrency investment fraud schemes...
Even limited voter rolls can be linked to identify people, research shows
Kaspersky expert breaks down a new phishing scheme that uses the Amazon SES cloud email service. Let's look at some examples to see how you can tell a phishing email from a real one.
Polymarket is a platform where people can bet on real-world events, political and otherwise. Leaving the ethical considerations of this aside (for one, it facilitates assassination), one of the...
Fraudsters aren't hacking credit unions, they are exploiting normal business processes. Flare reveals how structured loan fraud methods use stolen identities to pass verification and secure funds. [...]
Researchers from Trend Micro uncovered an ongoing cyberespionage campaign, tracked as Shadow-Earth-053, attributed to a China-aligned threat cluster... The post Shadow-Earth-053 targets Asian...
Not-for-profit organization MITRE released ATT&CK v19, introducing a series of structural and intelligence updates across the framework. The... The post MITRE ATT&CK v19 brings structural...
Everfield Germany GmbH has signed a definitive agreement to acquire Rhebo GmbH. Completion of the transaction remains subject... The post Everfield Germany to acquire Rhebo, expanding OT...
Even limited voter rolls can be linked to identify people, research shows Your voter data could be used against you. A foreign intelligence service that wished to identify the family members of...
As AI adoption accelerates, CISOs face a dual challenge: fueling innovation while mitigating the risks of a rapidly expanding attack surface. Tenable’s five-step framework for securing AI offers a...
Progress Software warned customers to patch a critical authentication bypass vulnerability in its MOVEit Automation enterprise-grade managed file transfer (MFT) application. [...]
Security breaches don't just test your defenses—they test your recovery. Join Kaseya in our upcoming webinar to learn how MSPs strengthen resilience with SaaS backups and BCDR to stay operational...
CISA has warned that threat actors have started exploiting the "Copy Fail" Linux security vulnerability in the wild, one day after Theori researchers disclosed it and shared a proof-of-concept...
Microsoft has confirmed that the April 2026 security updates are causing failures in third-party backup applications using the psmounterex.sys driver. [...]
Prioritize resilience over productivity, say CISA, NCSC and their friends from Oz, NZ, Canada