The Government Accountability Office (GAO) convened a panel discussion to gather industry perspectives on potential duplication or conflict among federal cybersecurity regulations affecting...
The company said it found and patched a previously unknown critical vulnerability in one product during the weekend shutdown, and has no indication it was exploited. The post Kiteworks lifts...
Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and...
The U.S. National Security Agency and other military intelligence and cybersecurity forces will guard election systems during the November midterms, Defense Secretary Pete Hegseth said Monday....
Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. "It is true that this month a 24-year-old man from Amsterdam was...
OpenAI says it is scrapping the release of its next-generation AI model over safety concerns that researchers raised during internal testing, in one of the clearest signs so far that agent...
The theft by a criminal hacking group of reams of sensitive personal data involving potentially tens of thousands of former and current F.B.I. employees is emerging as one of the worst breaches of...
External control of file name or path vulnerability (CVE-2026-85520) has been found in MyPresta Google Merchant Center Feed software.
Three times in one day, phones lit up across this Polish border community with a warning: A drone or a missile could cross from Ukraine, and residents should stay vigilant in case they might need...
Microsoft has started rolling out Windows 11 26H2 to everyone, and while it's this year's big annual feature update, you probably won't notice a massive difference after installing it. [...]
The nuclear relationship between China and the United States and its allies is increasingly shaped by widening perception gaps rather than deliberate strategic design. While both sides share a...
FreePBX security advisory (AV26-973)
RemoteThreat launches with $7M, 1,000 attack tools, and ambitions to equip enterprises and Uncle Sam for AI-speed operations
Nearly nine in 10 maritime respondents suffered a significant operational technology cyber incident during the past year, according to new research from Honeywell Technologies, highlighting the...
The healthcare and pharmaceutical sectors are facing a heightened risk of social-engineering attacks, according to cybersecurity researchers and threat intelligence experts. The Health Information...
A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running Linux in 3-5 minutes on average. [...]
We’re building CryptoLabe, an internal AI-powered tool that discovers cryptography across our codebase, surfaces dependencies, and helps us progress toward a full post-quantum migration by 2029....
Twelve years after launching Universal SSL, Cloudflare is applying to become a certificate authority. By combining an established root, an ACME-first approach, and Merkle Tree Certificates, we are...
As post-quantum signatures threaten to inflate TLS handshakes and certificate transparency logs, Merkle Tree Certificates offer a path to compact, auditable authentication. Cloudflare’s new...
We are expanding access to Cloudforce One's Threat Events Platform to every Cloudflare account and introducing Threat Signals. Threat Signals automatically parses open-source threat reporting,...
Cloudflare has added visibility into post-quantum (PQ) encryption in TLS 1.3 directly into HTTP Analytics, Log Explorer, and Logpush. Learn how to make sure your domain is protected with PQ encryption.
Cloudflare learns the structure of your HTTP requests and identifies deviations. You can add a positive security layer that helps reduce attack surface as AI makes it easier for attackers to...
Boeing has been proceeding with a multi-billion-dollar expansion of its facilities in St. Louis as the F-47 program continues to ramp up. The post Full F-47 Production Line “Not Too Far Away”:...
WatchGuard security advisory (AV26-972)
See how the Blue Agent investigated a multi-platform attack in minutes, following evidence across AWS and GitHub to uncover compromised credentials, stolen source code, and custom data exfiltration tooling
Children, elderly people, and a person on crutches walked alongside draft-age men who were likely Russian soldiers wearing civilian clothes, according to Khartiia Corps' drone footage.
Apple security advisory (AV26-971)
On Sept 27, Citrix released patches for two critical vulnerabilities being exploited in the wild. Based on current information, we confirm there has been no exposure or impact to LevelBlue or our...
Untrusted Search Path vulnerability (CVE-2026-19547) has been found in Ghostscript software.
The owner of the painting has donated it to Warsaw's National Museum after learning of its provenance.