As post-quantum signatures threaten to inflate TLS handshakes and certificate transparency logs, Merkle Tree Certificates offer a path to compact, auditable authentication. Cloudflare’s new...
We are expanding access to Cloudforce One's Threat Events Platform to every Cloudflare account and introducing Threat Signals. Threat Signals automatically parses open-source threat reporting,...
Cloudflare has added visibility into post-quantum (PQ) encryption in TLS 1.3 directly into HTTP Analytics, Log Explorer, and Logpush. Learn how to make sure your domain is protected with PQ encryption.
Cloudflare learns the structure of your HTTP requests and identifies deviations. You can add a positive security layer that helps reduce attack surface as AI makes it easier for attackers to...
Boeing has been proceeding with a multi-billion-dollar expansion of its facilities in St. Louis as the F-47 program continues to ramp up. The post Full F-47 Production Line “Not Too Far Away”:...
WatchGuard security advisory (AV26-972)
See how the Blue Agent investigated a multi-platform attack in minutes, following evidence across AWS and GitHub to uncover compromised credentials, stolen source code, and custom data exfiltration tooling
Children, elderly people, and a person on crutches walked alongside draft-age men who were likely Russian soldiers wearing civilian clothes, according to Khartiia Corps' drone footage.
Apple security advisory (AV26-971)
On Sept 27, Citrix released patches for two critical vulnerabilities being exploited in the wild. Based on current information, we confirm there has been no exposure or impact to LevelBlue or our...
Untrusted Search Path vulnerability (CVE-2026-19547) has been found in Ghostscript software.
The owner of the painting has donated it to Warsaw's National Museum after learning of its provenance.
Out-of-bounds write vulnerability (CVE-2026-15390) has been found in DENX Software Engineering Das U-Boot software.
The Dutch Institute for Vulnerability Disclosure (DIVD) suffered an AI-driven cyberattack that the organization described as "loud and very, very messy." [...]
A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real service, the SDK's maintainers said in a...
The OT security crisis facing manufacturers today is fundamentally a debt crisis, accumulated over decades as systems grew... The post How decades of disconnected modernization created OT security...
Australia’s Critical Infrastructure Security Centre is shifting toward a more formal enforcement posture in 2026-27, introducing tiered regulatory... The post Australia’s CISC strengthens critical...
Modern messaging apps allow users to link their phone accounts to their computer desktop. Eavesdroppers are taking advantage of this capability: Apps such as WhatsApp Web and Signal Desktop allow...
Image: Shutterstock What’s new: Dr. Zak Kassas’ most recent column, an excellent and interesting discussion of the many factors that will influence where, when, and how LEO PNT might proceed. Why...
Researchers from Nozomi Networks Labs identified 19 vulnerabilities in the Pepperl+Fuchs IO-Link Master ICE2-8IOL-K45P-RJ45 running EtherNet/IP firmware version... The post Nozomi identifies 19...
Schneider Electric, a global energy technology leader, and SECLAB, a French provider of OT cybersecurity solutions, announced an... The post Schneider Electric, SECLAB expand OT cybersecurity...
OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for an October launch, after it failed internal safety and alignment...
The Air Force said that Russia attacked Ukraine overnight with an Onyx and Zircon anti-ship missile, two Iskander-M/S-400 ballistic missiles, and 152 attack drones, 82 of which were jet-powered.
OpenAI said it has made the decision to pause training of its most powerful models after one of its agents during reinforcement learning (RL) training contacted an external chatbot by exploiting a...
Identity governance helps control who should have access, but periodic reviews alone may not reveal attacks as they happen. tenfold Software explains how real-time identity telemetry can help...
We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities. The post OperTraitors: How Kubernetes Operators Betray...
This new proactive service joins the suite of retainer offerings to provide dedicated, intelligence-led hunting specifically for your organization’s most high-value IT assets.
Visual identification of targets will no longer be required.
The Norwegian government said it had set aside 15 million Norwegian kroner ($1.5 million) to assist UNICEF's work in reintegrating previously deported Ukrainian children and tracing those who are...
Con artists are targeting timeshare owners who want out – and some victims are hit twice