Rapid7 finds attackers exploit high-severity, remote, zero-click flaws within days. Security teams s...
GitLab's new CE and EE releases fix a critical regex integer overflow that allowed unauthenticated c...
Chainguard's early fix release and a leaked exploit video put PHP2Shell's embargo under strain. Disc...
AI notetakers no longer need to join your call. Wearables and pendants record silently, and most com...
Mythos-class AI models have made exploitation fast. The real test now is whether security teams can...
eMudhra's exit from global TLS certificates shows why trust audits must reach beyond browsers, into...
A New Mexico judge ordered Meta to pay $25 billion over user data shared without consent, a case sho...
A corrupted BIOS can leave a laptop unbootable for days. Dual BIOS designs keep a backup firmware co...
A compromised ConnectWise Cloud Backup credential let attackers authenticate into Microsoft 365 tena...
Microsoft and Nvidia warn that fine-tuning and repackaging can strip safety protections while models...
F5 patched three critical NGINX flaws rated 9.2 under CVSS 4.0. Exploitation depends on configuratio...
Medical and industrial devices can't adopt post-quantum crypto with a simple patch. Here's where pat...
A remote defrost attack spoiled stock at hundreds of French supermarkets. The stores that lost least...
A Linux kernel checksum flaw, PwnEscape, lets VM guests corrupt host IPv4 headers. Patching guests a...
Threat actors now route command-and-control through Google Sheets, OpenAI APIs and Microsoft Graph,...
Models find complex bugs at 95% precision but fix them unreliably. Closing that gap takes governed m...
Weak keys in eight eMudhra intermediate CAs were cracked in under a second, prompting Chrome and Fir...
Revoking leaked UpdraftCentral keys doesn't remove the malicious plugins and admin backdoors attacke...
Palo Alto Networks has disclosed a serious flaw in PAN-OS, prompting urgent action from federal agen...