Latest news

Advertisement
  1. AI Security via ThreatDown

    The AI industry is slowly blinding itself to what its own models are thinking

    Industry News, Explained The AI industry is slowly blinding itself to what its own models are thinking OpenAI and Anthropic have each separately disclosed a real…

  2. Threat Intel via Cloudflare

    Localizing compliance at scale: achieving South Korea’s ISMS certification

    For ten days, auditors appointed by the Korea Internet & Security Agency (KISA) sat together with us and worked through 80 controls. That is what it took for a company…

  3. Vulnerabilities via Sonar

    SonarQube container scanning is now in open beta

    The layer your code scans don’t seeYou already verify the code you write and the dependencies you import in SonarQube. The images you ship add another layer: operating…

  4. AI Security via Bishop Fox

    The True Blast Radius of an AI Attack

    Connecting AI to enterprise systems changes what organizations entrust software to do. An agent that can query internal databases or modify business records has…

  5. AI Security via NCSC-NL

    NCSC-2026-0452 [1.00] [M/H] Kwetsbaarheden verholpen in FreeBSD bhyve hypervisor

    De FreeBSD community heeft meerdere kwetsbaarheden verholpen in bhyve Hypervisor De kwetsbaarheden betreffen race conditions, onjuiste validatie en…

  6. Breaches via BlackFog

    DarkCore: A Data-Theft RAT With a Session-Hijacking Browser

    BlackFog researchers uncover Bee Stealer, a Windows infostealer targeting Codex and Claude data with AI-powered victim profiling.

  7. Breaches via HIPAA Journal

    HHS Confirms HIPAA Penalties Will Not Be Adjusted for Inflation This Year

    This week, the Department of Health and Human Services (HHS) has confirmed via the Federal Register that it will not be applying an annual inflation multiplier in 2026…

  8. AI Security via Help Net Security

    OpenAI’s coding agents talked themselves out of being monitored

    Two AI coding agents running inside OpenAI silently weakened the systems built to catch AI misbehavior, and one of them then told its human operator it had done no such…

  9. Advertisement
  10. Vulnerabilities via Canadian Centre for Cyber Security

    Roundcube security advisory (AV26-1075)

    Serial Number: AV26-1075 Date: October 22, 2026 As of October 19, 2026, Roundcube is affected by vulnerabilities in the following product: Roundcube Webmail Prior to…

  11. Vulnerabilities via SecurityWeek

    Signal Vulnerability Lets Malicious Callers Block Hang-Ups

    Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.

  12. Vulnerabilities via Canadian Centre for Cyber Security

    GitLab security advisory (AV26-1074)

    Serial Number: AV26-1074 Date: October 22, 2026 As of October 21, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Community Edition (CE) and…

  13. Vulnerabilities via SecurityWeek

    Tech and Security Companies Respond to PHP2Shell Vulnerabilities

    Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.

  14. Threat Intel via The Record

    South Carolina officials offer assistance after state capital hit with cyberattack

    The systems impacted by the attack include the MyColaSC platform that citizens use to pay utility bills, report non-emergency issues and access other city services.

  15. Vulnerabilities via NCSC-NL

    NCSC-2026-0451 [1.00] [M/H] Kwetsbaarheden verholpen in Cisco Expressway Series

    Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Expressway Series. De kwetsbaarheden betreffen onder andere onvoldoende autorisatiecontroles tijdens Mobile en…

  16. Vulnerabilities via Ubuntu Security

    USN-8952-1: Tornado vulnerabilities

    It was discovered that Tornado did not properly handle certain HTTP requests and network inputs. An attacker could possibly use these issues to cause a denial of…

  17. Vulnerabilities via NCSC-NL

    NCSC-2026-0450 [1.00] [M/H] Kwetsbaarheden verholpen in Snort 3 van Cisco

    Cisco heeft meerdere kwetsbaarheden verholpen in Snort 3, het open source intrusion detection en prevention systeem dat in diverse Cisco-producten wordt gebruikt. De…

  18. Vulnerabilities via NCSC-NL

    NCSC-2026-0449 [1.00] [M/H] Meerdere kwetsbaarheden verholpen in Oracle Java

    Oracle heeft meerdere kwetsbaarheden verholpen in Oracle Java. In Oracle Java SE, JavaFX en GraalVM Enterprise Edition zijn diverse kwetsbaarheden aanwezig die door…

  19. Vulnerabilities via Help Net Security

    New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619

    Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote…

  20. AI Security via CISA

    Managing AI Token Consumption for Operational Resilience

    CISA, the Canadian Centre for Cyber Security (Cyber Centre), and partners are releasing joint guidance, Managing AI Token Consumption for Operational Resilience, to help…

  21. Vulnerabilities via CISA

    Siemens SIMATIC S7 Webserver API

    View CSAF Summary .NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or…