New coalition aims to streamline open source bug fixes
The Athena coalition, led by Chainguard, will leverage artificial intelligence to proactively address vulnerabilities in open source code.
SC Media
20 articles
3 ways to secure enterprise apps in the AI age
By fighting AI with AI, teams can stay one step ahead in the great innovation race.
Fixing pentesting, Meta is destroying its engineering org, the weekly news - Adriel Desautels - ESW #465
2 Linux kernel flaw PoCs published, enabling local privilege escalation
One of the flaws, DirtyClone, is a variant of the DirtyFrag vulnerability class.
4 arrested in Poland for SIM-swapping and cryptocurrency theft
The operation, a collaboration between Poland's Cybercrime Bureau (CBZC) and U.S.
Chinese APT CL-STA-1062 targets Southeast Asia with new TinyRCT backdoor
CL-STA-1062 employs a hybrid toolkit, combining open-source tools like SoftEther VPN, Mimikatz, and VNT with a newly discovered custom backdoor named TinyRCT.
ATF cancels contract for ad-surveillance technology after privacy concerns
As outlined in CyberScoop, the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has canceled a contract with Penlink that utilized ad-surveillance t...
Turla group deploys new STOCKSTAY backdoor against Ukraine and Italy
STOCKSTAY, written in .NET and utilizing the Windows Forms framework, communicates with its command-and-control (C2) server via a secure WebSocket connection.
NAIC confirms cyberattack after ShinyHunters claims 3.1TB data theft
The attack exploited a zero-day vulnerability in Oracle PeopleSoft, an enterprise resource planning software.
Russian hackers suspected in Jaguar Land Rover cyberattack
The cyberattack on Jaguar Land Rover (JLR), a major UK employer, caused production to halt for months, resulting in an estimated $2.5 billion loss to the Bri...
Grand Theft Auto VI hype fuels new wave of scams targeting gamers
Security firms Malwarebytes and NordVPN have identified a surge of sophisticated fake websites offering "VIP Early Access" to Grand Theft Auto VI.
Scammers abuse Shopify's Shop app with fake receipts
Scammers are impersonating well-known brands like Norton, McAfee, Apple, and PayPal by adding fake orders to the Shop app, which is popular in North America ...
Cybersecurity professionals lose faith in fully automated AI testing
The report, based on surveys of approximately 450 cybersecurity professionals, indicates that 78% of respondents observed automated tools failing to detect c...
Amazon Q Developer extension vulnerability could have exposed cloud credentials
The vulnerability, tracked as CVE-2026-12957, allowed attackers to execute arbitrary commands by embedding malicious code in workspace configuration files.
Curl fixes 18 vulnerabilities, including a 25-year-old bug
The update includes fixes for issues discovered through AI-assisted analysis, with AISLE identifying six CVEs, including the oldest known bug, CVE-2026-8932,...
AI Brain Harvest, Fortibleed, Win 10, Blacksite, Windchill, Cisco, BB-8, Josh Marpet - SWN #593
Five nines and the SaaSpocalypse: Why credential security survives the AI reset
AI won't replace credential security, but it demands stronger identity safeguards.
Think tank warns US markets face hidden infrastructure risks
ICIT: Hidden infrastructure concentration threatens U.S.
From M2M to A2A: Why your identity stack wasn't built for what's coming
The shift from M2M to A2A communication heralds an entirely new operational model for enterprise computing.
NIST seeks public feedback on updated IoT security guidelines
The initial public draft of the updated guidelines, titled "IoT Product Cybersecurity Guidelines for the Federal Government: Establishing IoT Product Cyberse...