A week after the White House issued a new executive order on artificial intelligence and cybersecurity, Daniel Kroese says one of the central challenges is not simply building more powerful AI...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active...

Splunk security advisory (AV26-586)

Broadcom VMware security advisory (AV26-585)

Palo Alto Networks security advisory (AV26-583)

n8n security advisory (AV26-584)

HPE security advisory (AV26-582)

Erlang security advisory (AV26-581)

[Control systems] ABB security advisory (AV26-580)

Jenkins security advisory (AV26-578)

FreePBX security advisory (AV26–579)

Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. [...]

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub. [...]

Your pentest report looks clean. That might be the problem. Run automated pentesting long enough, and the new findings start to dry up. By the third or fourth run, fewer issues appear. The report...

GitHub has announced that npm v12, expected next month, will introduce several security-focused changes aimed at blocking supply-chain attacks abusing behaviors triggered by the 'npm install'...

Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors

Microsoft on Tuesday released fixes for a record 206 security vulnerabilities impacting its software portfolio, including three flaws that have been publicly disclosed at the time of release. Of...

AMD security advisory (AV26-577)

Agentic AI will disrupt how SOC teams are built — and the way CISOs hire. Here’s how to embrace AI.

FreeBSD security advisory (AV26-576)

Mozilla security advisory (AV26-575)

HPE security advisory (AV26-573)

Spring security advisory (AV26-574)

Oracle PeopleSoft servers are being targeted in ongoing data theft attacks by the ShinyHunters extortion gang, which claims to have stolen data from over 100 organizations. [...]

OpenSSL security advisory (AV26-572)

A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment...

For the past several years, the technology sector has remained the most targeted sector by eCrime and state-sponsored adversaries. The persistent volume of hands-on-keyboard intrusions targeting...

The ACLU is suing two Florida police departments over the arrest of a Fort Myers man in a child-abduction case, saying officers treated a flawed face recognition match as a near-certain ID.

Deceptive installers disguised as legit macOS software deliver infostealers that grab passwords, cookies, and crypto wallets. Learn how to detect them.

In the latest sign that unmanned vehicles are an increasingly pivotal part of a modern military, a drone boat rescued the two-person crew from the U.S. Apache helicopter gunship that went down...