20 articles
The Next.js team has released security updates that address nine vulnerabilities affecting the App Router, Server Actions, rewrites, image optimization, cach...
Ransomware activity followed a recognizable pattern during the previous four years. Each year was defined by a dominant actor, its collapse, or a major suppl...
Here’s a look at the most interesting products from the past week, featuring releases from Astelia, Druva, Swimlane, and ThreatDown. Druva brings backup, rec...
Can platforms reduce scope uncertainty and enable safe containment decisions?
As outlined in Bleeping Computer, Ukrainian CERT has identified a new cyber campaign that leverages the legitimate Notepad++ application to distribute malwar...
Cyber Insider disclosed that a popular Wansview indoor security camera model, the WVC Q5, was found to be shipping with a web server vulnerable to a flaw fir...
These platforms enforce consistent security baselines across AWS, Azure, and Google Cloud environments through unified policy frameworks
A banking Trojan known as Lampion, believed to have originated in Brazil, is still actively used in ongoing attacks targeting Portuguese organizations.
Technology companies that cannot quickly fix dangerous vulnerabilities should not be allowed to sell their products to federal agencies, according to Pete Wa...
As outlined in The Register, a recent security assessment highlighted significant vulnerabilities within the healthcare sector, particularly concerning compr...
As outlined in The Register, Google has introduced a new account recovery method that utilizes selfie videos, allowing users to regain access to their accoun...
The Hacker News disclosed that a significant and often overlooked security threat involves fabricated machine identities, a concept analogous to synthetic id...
Millions of vehicles equipped with dealer-installed KARR and SWDS security systems are susceptible to Bluetooth-based attacks that could allow unauthorized a...
A new paper analyzes the current controversies over end-to-end encryption (E2EE), which governments worldwide are seeking to limit for law enforcement and na...
The governance chain evaluation framework tests whether a platform can enforce the workflows that turn discovery into governance
Each signal type drives different control decisions
Understanding what defines a nation-state actor — and what does not — changes how defenders evaluate threat intelligence relevance
Non-human identities break protocol assumptions
A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cybercriminals identify which vi...
Can your existing security tools cover AI-specific risks or do you need to deploy a purpose-built AI governance platform?