All Articles
2443 articles · Updated every 4 hours
Advertisement
Analyze the rise of AI Bill of Materials (AIBOMs), regulatory drivers like the EU AI Act, and the technical challenges of securing opaque AI supply chains.
Interpol's Operation Ramz highlights increased law enforcement collaboration in the Middle East to dismantle phishing and ransomware infrastructure.
Microsoft releases mitigation guidance for the YellowKey zero-day, a Windows BitLocker vulnerability allowing unauthorized access to encrypted data volumes.
GitHub confirms a security incident where a malicious VS Code extension compromised an employee account, leading to the unauthorized access of 3,800 repos.
Grafana Labs confirms a GitHub breach exposing internal source code following a TanStack npm supply chain attack. No customer production systems compromised.
GitHub investigates TeamPCP's claim of breaching internal repositories, potentially exposing 4,000 private codebases. Defenders must secure supply chains.
GitHub is investigating a potential breach of 4,000 internal repositories claimed by TeamPCP, highlighting the risk of source code leaks for enterprises.
Verizon's 2026 DBIR reveals vulnerability exploitation as the leading breach vector, surpassing credential theft. AI accelerates attacks, patching delays persist, and
Microsoft shuts down a malware-signing-as-a-service provider that leveraged fraudulent certificates to bypass security controls for ransomware groups.
A critical RCE vulnerability in ChromaDB (CVE-2024-34351) allows unauthenticated attackers to hijack servers via malicious metadata filters. Patch to 0.5.1 now.
Critical RCE (CVE-2026-0300) in Siemens RUGGEDCOM APE1808 devices via PAN-OS User-ID Captive Portal buffer overflow. Unauthenticated root code execution possible. Patch
CISA warns of CVE-2026-4293, a Cross-site Scripting vulnerability in Kieback & Peter DDC Building Controllers. Attackers could control victim browsers, affecting
No articles in this category yet.
We use cookies for analytics (GA4) and personalised ads (AdSense). They are only activated if you accept. Privacy Policy
