Latest news
-
Threat Intel via The Record
Russian travel booking platform suspends reservations after cyberattack
Customers of Russian travel website Anywayanyday were unable to book tickets or hotel rooms as the company responded to a cyberattack.
-
Vulnerabilities via Ubuntu Security
USN-8929-1: Bind vulnerabilities
Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker could possibly use this issue to cause Bind to consume…
-
Threat Intel via Help Net Security
FBI raids 40+ laptop farms helping North Korea pocket US tech salaries
North Korean IT workers used stolen and fabricated identities to land remote jobs at more than 70 US companies, with help from Americans who allegedly kept…
-
AI Security via Help Net Security
Download: The IT and security field guide to AI adoption
Security and IT teams are under pressure to adopt AI, but many are seeing the opposite of what was promised. Tools that demo well don’t hold up in real workflows…
-
Vulnerabilities via Sonar
Sonar's new JS/TS engine: Tracing meaning, not syntax, to hunt down real vulnerabilities
What theory-grounded static analysis is supposed to buy youStatic analysis covers a range of techniques. Linters sit at one end: they parse the code into a syntax tree…
-
AI Security via Sonar
AI coding ROI is a throughput problem, and verification is how you solve it
Planning season is around the corner, and for many engineering leaders this year's budget conversation includes a line item that barely existed two years ago: AI coding…
-
Vulnerabilities via Sonar
Prioritize what's actually exploitable: Vulnerability reachability is now available in SonarQube Advanced Security
If you run software composition analysis (SCA) at any scale, you know the problem isn't finding vulnerabilities—it's finding the ones that matter. A typical dependency…
-
AI Security via Sonar
Which LLM writes the best code? A 2026 comparison
Search for the best LLM for coding and you will find confident rankings that disagree with one another and go stale within weeks. Since the start of September 2026…
- Advertisement
-
Vulnerabilities via Rapid7
From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)
An enterprise mail server authenticates users, stores private communications, delivers recovery links, runs calendars, and sends mail that employees and other systems…
-
Vulnerabilities via Bishop Fox
Behind Closed Doors: How Physical Penetration Testing Secures Sensitive Conversations
Closing the door doesn’t make a room secure. Alethe Denis breaks down how physical penetration testing evaluates whether unauthorized people can reach sensitive spaces…
-
Threat Intel via SecurityWeek
Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
-
Threat Intel via Microsoft Security
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Uncovering the shadow world of a phishing kit ecosystem Storm-3119: YAM Store, the power broker Storm-2990: The Iron Man System phishing kit Downstream activity from…
-
AI Security via Dark Reading
Russian Influence Operation Widely Targeting Latin America
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other…
-
Threat Intel via CyberScoop
Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
Microsoft collaborated with Japanese authorities, Health-ISAC and several cybersecurity companies to dismantle an expansive, seemingly disconnected ecosystem of…
-
Vulnerabilities via Cloudflare
Inside Hyperdrive: How we solved a rare Hyperdrive MySQL caching bug
Hyperdrive support for MySQL is now generally available (GA). Hyperdrive, Cloudflare’s database connection pooler for Workers, initially only supported Postgres. Since…
-
Vulnerabilities via BleepingComputer
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day…
-
Vulnerabilities via SOCRadar
October 2026 Patch Tuesday: 1,413 Flaws, 3 Zero-Days
October 2026 Patch Tuesday: 1,413 Flaws, 3 Zero-Days Microsoft’s October 2026 Patch Tuesday, released on October 13, 2026, fixes 1,413 vulnerabilities across Windows…
-
Ransomware via ransomware.live
🏴☠️ Wallstreet has just published a new victim : E-Z Pack Trucks
E-Z Pack Trucks (E-Z Pack Manufacturing) is a U.S. maker of refuse and recycling truck bodies and related parts. Its product range includes front loaders, rear loaders…
-
Ransomware via ransomware.live
🏴☠️ Wallstreet has just published a new victim : Green Clinic
Green Clinic is a community-based healthcare provider serving Ruston and North Central Louisiana. Founded in 1948, it brings primary care, pediatrics, specialty care…
-
AI Security via Ars Technica
Anthropic warns small AI models could self-replicate through IoT devices
AI company Anthropic is warning that advances in small AI models could soon usher in a new era of self-replicating malware that’s capable of infecting smart fridges…