For small businesses who are often confronted with limited resources, knowing how to get started and where to find support with planning, implementing, or ev

Twelve years after launching Universal SSL, Cloudflare is applying to become a certificate authority.

Statement regarding reported activity targeting Government of Canada websites

We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities.

Software does not take holidays, but people do. Daily posts of victims on ransomware data leak sites from two independent trackers between 2023 and 2026 fall by

VK can change what the Russian Max messenger does to you, one user at a time. Its surveillance features can be switched on without you noticing. Read our full analysis.

To combat the exponential growth of AI-driven CVEs, Canonical is shifting to a rapid 2-week Linux kernel SRU cycle published weekly. Read about the update.

Anthony Albanese says he has spoken to the Open AI chief executive to express his concern about the incident and the length of time it took the tech company to inform the government of the breach.

Details a pre-auth format string vulnerability in tac_plus, a popular daemon implementing TACACS+ for network device management, and the shared secret oracle that makes it a practical RCE chain.

A heap overflow and SSO misconfiguration to compromise OpenAI internal repositories

On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents performing web-lookup tasks with significant overlap with the German Wiki Incident.

OpenAI shares a framework for tracking, investigating, and disclosing model misalignment, alongside six reports of unexpected or concerning model behavior.

The AI model accessed the internet and guessed credentials to three websites, a Google official told the BBC.

Департамент Кіберполіції Національної поліції України

Ação cumpre ordens judiciais em Goiás, em São Paulo e no Rio de Janeiro

EtherHiding, a technique that uses blockchain smart contracts as takedown-resistant payload storage, has been seen across more than 5,400 compromised

This joint guidance explains why effective communications during outages is critical to minimize operational impacts, maintain credibility and situational awareness, and support response efforts.

C# 15 ships with .NET 11. It adds union types, closed hierarchies, a preview of the updated unsafe model, and a few smaller changes that remove everyday ceremony.

REVSTEALER hides backup C2 addresses in Polygon smart contracts. Inside its sandbox scoring, credential-harvesting scope, and four undocumented modules.

An international operation supported by Europol has disrupted the Sality peer-to-peer (P2P) botnet, a long-running criminal infrastructure used to distribute malicious payloads to thousands of infecte...

We present an alignment assessment of four incidents in which Claude models gained unauthorized access to real third-party systems.

Explore Unit 42 research on AI-enabled malware. Learn how existing behavioral detection and endpoint analytics stop AI-authored code before execution.

Palo Alto Networks Security Advisories - Latest information and remediations available for vulnerabilities concerning Palo Alto Networks products and services.

This is the story of a sophisticated fraud network that has deceived people around the world. And the hunt for the ones who make it possible.

In a random sample of 10,000 webpages collected in July 2026, one-in-ten show signs of being written or substantially edited by AI.

Black Lotus Labs and the FBI uncovered China-nexus infrastructure used to hide cyber espionage, showing how early detection helps protect customers.

An active BlueKit BitM phishing campaign targeting financial-sector CEOs: branded PDF lures, geofencing, M365 session hijack, and ScreenConnect delivery.

An international operation supported by Europol has disrupted the Sality peer-to-peer (P2P) botnet, a long-running criminal infrastructure used to distribute malicious payloads to thousands of infecte...

open-source pentest management built to be operated by an AI agent - CSPF-Founder/red-clippy

You can no longer assume a mere VM will contain a sufficiently advanced AI agent.

SITG-Consulting has published Europe’s Post-Quantum Readiness 2026: An Empirical Assessment of the EU-27, an independent assessment of the publicly verifiable state of post-quantum cryptography readin...

OpenAI shares findings from the Hugging Face security incident and the steps we’re taking to strengthen AI model security, monitoring, and alignment.

Two West Australian men have been charged following a joint investigation between the AFP and Western Australia Police Force (WAPF), working in parallel with the Federal Bureau of Investigation (FBI),...

INTERPOL-coordinated operation leads to the identification of 263 suspects

Release notes for Windows 11 Insider Experimental Preview Build 26340.9233

Kaspersky expert has discovered new Android malware designed to serve ads and build a proxy botnet. It's delivered through legitimate software for DoFun head units.

TrendAI™ Research provides a comprehensive analysis of the RedC2 Linux Implant, a sophisticated threat recently discovered in the npm open-source ecosystem.

RFC 9234 lets routers reject route leaks on their own, using BGP Roles and the Only to Customer attribute. We measured who has deployed it, and found two Tier 1 networks unexpectedly stripping OTC.

Datadog Security Research executed a newer N4D Mesh Controller sample in isolated microVMs, uncovering rotated infrastructure, a UPX-packed go-titan agent, MCP tool abuse in action, and direct runtime...

From automated fixes to full rebuilds, explore the newest recovery tools that keep IT in control while helping address a broad range of scenarios:

Департамент Кіберполіції Національної поліції України

Police seize "sophisticated equipment" and cash from more than 50 foreign nationals found in a house near Podgorica, checking possible links to high-tech crime.