Security firm Coinspect has disclosed a crypto wallet flaw it calls Ill Bloom, and attackers are already using...
A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months)...
Datadog Security Labs is warning of “several overlapping campaigns” that are systematically enumerating corporate GitHub...
Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is...
GitHub has officially announced the release of npm version 12 with install scripts disabled by...
Most security mess starts as admin work. A link gets clicked. A tool gets trusted....
AI has changed how fast attacks move. Work that once took an attacker days now...
An alternate path to Cyber Essentials Plus certification, without compromising the integrity of the scheme....
Everyone seems to have announced a clearinghouse over the past few weeks. We did too....
Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel...
Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month...
Meta has announced that its new artificial intelligence (AI) model Muse Image lets people use...
Ask an AI coding agent to scan open-source code for security holes, and it might...
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code...
Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has...
Sophos looked at a week of its own endpoint data and found that AI coding...
AI coding assistants have a habit of making things up. Ask one to fetch a...
Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk,...
A recent EvilTokens campaign targeting businesses across the US and Europe is exposing a new...
A new banking fraudulent operation is targeting customers of Mexican banks, fintech, payment processors, and...
New research shows that a signed Git commit’s hash is not the one-of-a-kind name that...
For years, account takeover (ATO) followed a predictable script. Attackers bought stolen credentials in bulk,...
An AI coding assistant that refuses to answer a dangerous request in its chat box...
A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand...
Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to...
A new Android malware operation called RedWing is being rented out on Telegram as a...
A critical flaw in Google’s Dialogflow CX could have let an attacker with edit rights...
A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take...
A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization’s...
Interested in getting in contact with us about our services? Perhaps you would like to know more about how we can help you specifically? Tell us more, and we will happily listen to and provide you with further information and a consultation.
