HPE security advisory (AV26-287)
The hacking group that claimed responsibility for the massive wiper attack against medical technology company Stryker declared today that it breached the FBI in retaliation for the Justice...
[Control systems] ABB security advisory (AV26-286)
Grafana security advisory (AV26-285)
Squid security advisory (AV26-284)
The pro-Iran hacking group that claimed to have swiped a large volume of data from Lockheed Martin hiked their ransom demand even while saying they already shared sensitive information with the...
Most teams have security tools in place. Alerts are firing, dashboards look clean, threat intel is flowing in. On the surface, everything feels under control. But one question usually stays...
Cybersecurity researchers have disclosed a vulnerability in Anthropic's Claude Google Chrome Extension that could have been exploited to trigger malicious prompts simply by visiting a web page....
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed a vulnerability in HikVision, as well as 10 in TP-Link, and 19 in Canva.The vulnerabilities mentioned in this blog post have...
In this week's newsletter, Amy draws parallels between the collaborative themes of "Project Hail Mary" and the massive team effort behind the newly released Talos Year in Review report.
Le processus de double-extorsion est désormais bien installé dans les pratiques des cybercriminels. Ils lancent une attaque, volent des données à leur victime, en chiffrent, déposent une...
Unmasking impostors is something the art world has faced for decades, and there are valuable lessons from the works of Elmyr de Hory that can apply to the world of defensive cybersecurity. During...
A systemic numbness to cyberattacks has exposed the U.S. economy and its institutions to ever-widening threats. Retired four-star military officials worry the worst day in cyber is yet to come....
Some weeks in security feel loud. This one feels sneaky. Less big dramatic fireworks, more of that slow creeping sense that too many people are getting way too comfortable abusing things they...
Dutch professional football club Ajax Amsterdam (AFC Ajax) disclosed that a hacker exploited vulnerabilities in its IT systems and accessed data belonging to a few hundred people. [...]
The kernel exploit for two security vulnerabilities used in the recently uncovered Apple iOS exploit kit known as Coruna is an updated version of the same exploit that was used in the Operation...
Aqua Security security advisory (AV26-283)
Reviewed advisories hit a four-year low, malware advisories surged, and CNA publishing grew—here’s what changed and what it means for your triage and response. The post A year of open source...
PTC security advisory (AV26-282)
The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical vulnerability identified as CVE-2026-33017, which affects the Langflow...
The Telegram-based Xinbi Guarantee black market sells services that help prop up scam operations. British officials just hit the highly lucrative marketplace with sweeping sanctions.
The age filters will be turned on by default, meaning that all users — including adults — will have to prove their age via credit card and other payment methods on file or by submitting an ID to...
The replacement of a Secretary of Homeland Security should be a moment for reflection and represent an opportunity for improvement. Instead, it has become routine. Kristi Noem is out. Another...
The debate about lethal autonomy—core to the Trump administration’s fight with Anthropic—obscures a deeper danger of the Pentagon’s rapid adoption of commercial AI tools: they might weaken the...
The Cybersecurity and Infrastructure Security Agency, after a year of workforce reductions that has left CISA’s ranks depleted, is planning to recruit more than 300 people in the coming months....
A Los Angeles jury delivered a rare verdict against Silicon Valley giants Wednesday — the second finding in two days — boosting hopes of safety advocates that courts will deliver a long-sought...
There’s a theoretical red line with cyber warfare. Cross it, and the U.S. will respond with a physical attack like missile strikes. And that line “is whatever the President says it is,” according...
Heliox EV Chargers listed below contain improper access control vulnerability that could allow an attacker to reach unauthorized services via the charging cable. Siemens has released new versions...
SIDIS Prime before V4.0.800 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, and several Node.js packages as described below. Siemens has released a new version of SIDIS...