Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain...
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a...
With roughly two weeks left for public comment on FAA Section 2209, critical infrastructure operators are running out of time to shape rules that could determine whether sensitive facilities can...
On July 21 and July 22, Huntress observed a number of attacks that started with a malicious public Claude Artifact hosted on a legitimate Claude domain, and ended in organizations being infected...
The observed incidents include “malicious project file interactions and manipulation of data on human machine interface (HMI) and supervisory control and data acquisition (SCADA) displays,” the...
Drupal security advisory (AV26-738)
Exim security advisory (AV26-737)
Sunday-to-Monday onslaught fuels speculation over AI-assisted bug reports
Progress security advisory (AV26-736)
Check Point security advisory (AV26-735)
Mitel security advisory (AV26-734)
n8n security advisory (AV26-733)
A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS...
Both houses of the French Parliament voted to block social media access for children under 15, making France the first European country to enact a ban amid a broadening global crackdown.
ISC BIND security advisory (AV26-732)
Atlassian security advisory (AV26-731)
Security leaders who build fast, visible paths to AI adoption are becoming the most valued partners in their organizations. AI governance done right gives security teams the visibility they need,...
The worm blends in with thousands of other commands occurring daily in any given environment, yet its intent and origins remain unknown. The post Malware is targeting AI tools in software...
The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today, AI-equipped attackers are simply outpacing...
A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.
The long-held understanding among security researchers and network defenders is that it's impossible to negotiate in good faith with an extortion racket because there's no incentive for the other...
Google Chrome security advisory (AV26-730)
Oracle security advisory – July 2026 quarterly rollup (AV26-729)
Learn how AI is reshaping SOC careers, elevating analysts from manual triage to strategic threat hunting and AI governance.
Move over Flipper. There's a new Dophin X in town
Industry heavyweights bring new focus to vulnerabilities in the age of AI. Here’s how it might help improve security.
Integer Overflow vulnerability (CVE-2026-53910) has been found in GNU diffutils software.
“I sent some emails warning people of a security incident and [law enforcement] c[a]me up at me with machine guns—that kind of doesn’t seem to balance.” — Anonymous Anti-hacking laws, such as the...
The United States (U.S.) military is rapidly integrating artificial intelligence across operations, yet power, connectivity, and satellite communications infrastructure are struggling to keep...
Mapping FortiGate event logs to real-world campaigns: A step-by-step researcher’s guide to continuous agentless monitoring.