Iran hackers claimed that they breached California water systems today in retaliation for alleged U.S. strikes that damaged civilian water infrastructure in southern Iran. Iran state broadcaster...
An international law enforcement operation has dismantled one of the cryptocurrency laundering services most trusted by ransomware gangs and cybercriminal networks, cutting off a key financial...
Most good security work is invisible by design. Today is the exception. The 2026 Cybersecurity Stars Awards winners are announced across 95 subcategories in four main award categories. The reason...
It's been one of those weeks. You expect the usual noise: recycled malware, sloppy attacks, another easy target getting hit. Instead, there's a supply chain attack kit in a public repo, a...
Ubiquiti security advisory (AV26-589)
Check Point security advisory (AV26-590)
No disclosure via official channels, no offer of identity theft monitoring, no problem
In this week’s newsletter, Amy reminisces on the tech toys of their childhood, inspired by a hilarious lesson about why your digital privacy shouldn't be left on an open channel.
Denis Obrezko accused of orchestrating cyberattacks that compromised at least 11 U.S. companies as part of the Kremlin-linked group's sprawling espionage operation.\ The post Russian national...
For thirty years, vulnerability management ran on a buffer: the months between when a vulnerability was found and when someone could figure out how to weaponize it. The solution was...
A joint congressional report describes a spam operation that turned tens of thousands of fake podcasts into search-engine bait for illegal pharmacy and scam sites.
The Vietnam-aligned threat actor known as OceanLotus has been attributed to two distinct campaigns that targeted domestic entities and stock investors with a backdoor known as SPECTRALVIPER. The...
A vulnerability has been discovered in the Updates Environment Management component of PeopleSoft Enterprise PeopleTools that could allow an attacker with network access via HTTP to completely...
GitLab security advisory (AV26-588)
Oracle security advisory (AV26-587)
he Pentagon announced the “Cyber Mastery Incentive Pay” (C-MIP) program on Wednesday, an initiative defense officials described as an effort to attract and develop talented cyber operators through...
Introduction Mandiant and Google Threat Intelligence Group (GTIG) have identified an active compromise and extortion campaign attributed to UNC6240 (ShinyHunters) targeting Oracle PeopleSoft...
Researchers at cyber-physical systems security firm Claroty have uncovered multiple vulnerabilities in two widely deployed HVAC and UPS products used in data centers, demonstrating how attackers...
Researchers from Claroty’s Team82 disclosed two critical vulnerabilities in Vertiv Liebert IS-UNITY-DP and Liebert RDU101 network cards used... The post Claroty finds authentication bypass, RCE...
Several senior federal technology officials responsible for agency cybersecurity and IT systems are frustrated by the lack of White House guidance on adopting Anthropic’s powerful Mythos model,...
By Yarden Porat AI agents need memory. Frameworks like LangGraph provide it through checkpointers – persistence layers that store execution state. But what happens when that persistence layer...
China was likely behind an online influence operation to sway U.S. perceptions of artificial intelligence technology and reshape the debate in Washington around the infrastructure needed to...
The Cybersecurity and Infrastructure Security Agency (CISA) issued Binding Operational Directive 26-04: Prioritizing Security Updates Based on Risk that directs federal civilian agencies to assess...
Decades of piling complexity onto non-standardized stacks have left security unsteerable. Juan Andrés Guerrero-Saade makes the case for a new approach.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) published a Binding Operative Directive requiring federal civilian agencies to... The post CISA BOD 26-04 directs agencies to...
DNV has been selected to provide cybersecurity services for the Santiago de los Caballeros monorail project in the... The post DNV selected to secure Dominican Republic’s first monorail with rail...
Software supply chain security company NetRise announced this week the launch of its Discovery Partner Program, a partner-first... The post NetRise launches Discovery Partner Program to strengthen...
The SANS Cyber Workforce Academy has opened applications for an expanded Maryland training program that now includes dedicated... The post SANS expands Maryland cyber workforce program with new...
The new open-source project could serve as the basis for a future of apps with features as complex as Slack, Discord, or Google Docs—but with added protection against surveillance.
Law enforcement has dismantled the “AudiA6” cryptocurrency service allegedly used by ransomware actors and other cybercriminals to launder more than $380 million. [...]