ALT: Jack Black Amazed by Glowing Book

Visa participation reflects a proactive approach to testing advanced AI for cybersecurity and strengthening the global payments ecosystem

OWASP Top 10:2025

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

The OWASP Top 10 is the reference standard for the most critical web application security risks. Adopting the OWASP Top 10 is perhaps the most effective first step towards changing your software devel...

Join the global cybersecurity community in the most festive and challenging event of the year! The SANS Holiday Hack Challenge cyber range offers FREE, high-quality, and super fun hands-on cybersecuri...

In a supply chain attack, attackers have injected malware into NPM packages with over 2.6 billion weekly downloads after compromising a maintainer's account in a phishing attack.

Application security pros need to be ready to cope with security at the speed of code. Here's how to get a handle on modern software risk.

: Tulsi Gabbard boasts Washington forced Blighty to drop iPhone encryption fight

Download Proton Authenticator app for Windows, macOS, Linux, Android, and iOS. Protect your accounts with secure two-factor codes. No ads, no tracking.

A hacker planted data wiping code in a version of Amazon's generative AI-powered assistant, the Q Developer Extension for Visual Studio Code.

Proton VPN confirmed an hourly increase in sign-ups of over 1,400% starting from July 25, 2025

A leak forum did what leak forums do - but to its own users

Learn how to test your cyber defenses with the Pentesting & Hacking Toolkit by Packt. Protect yourself from cyberattacks and support charity!

: Don't leave the door open to disgruntled workers

The new equation, introduced by the National Institute of Standards and Technology (NIST), aims to offer a mathematical likelihood index that could be a game-changer for SecOps teams and vulnerability...

European Vulnerability Database

A vulnerability in the Out-of-Band Access Point (AP) Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to upload arbit...

​Offensive Security warned Kali Linux users to manually install a new Kali repository signing key to avoid experiencing update failures.

Code-generating large language models (LLMs) have introduced a new security issue into software development: Code package hallucinations. Package hallucinations occur

The CA/Browser Forum has voted to significantly reduce the lifespan of SSL/TLS certificates over the next 4 years, with a final lifespan of just 47 days starting in 2029.

A cascading supply chain attack on GitHub that targeted Coinbase in March has now been traced back to a single token stolen from a SpotBugs workflow, which allowed a threat actor to compromise multipl...

Twitch is the world

This document describes the security content of iOS 18.3.1 and iPadOS 18.3.1