Filigran launches AI orchestration layer for threat management
XTM One integrates Filigran's OpenCTI threat intelligence platform and OpenAEV exposure validation tool into a unified workflow, addressing the manual proces...
SC Media
20 articles
Tempo news website hit by massive DDoS cyberattack
Tempo's technology team reported that the cyberattack generated an unprecedented volume of bot-generated traffic, placing immense pressure on their infrastru...
CISA to reevaluate risk prioritization for critical infrastructure and federal agencies
CISA is set to release a binding operational directive for federal agencies, aiming to revise vulnerability management practices.
Iranian-linked hackers claim cyberattack on Israeli military, but evidence is weak
As reported by HackRead, an Iranian-linked hacker group named Handala claimed on Sunday, June 7, 2026, to have conducted significant cyberattacks against Isr...
Discord data breach claim filed with Maine AG raises red flags
The notice, submitted on June 8, 2026, presents several anomalies that suggest it may not be an officially verified incident.
Windows 10 KB5094127 update fixes vulnerabilities, enhances Secure Boot monitoring
The KB5094127 update primarily focuses on security enhancements and bug fixes, as Microsoft is no longer introducing new features to Windows 10.
French government messaging platform Tchap breached via hijacked account
The attack on Tchap, a platform developed for the French public sector, reportedly involved a social engineering attack that compromised a user account.
Geinbot, SolarWinds, Brave, UNK_Deaddrop, durabletask, Insta, Aaran Leyland... - SWN #588
CISA adds Check Point VPN bug to list of exploited vulnerabilities
CISA warns of an exploited Check Point VPN flaw that lets attackers bypass authentication.
AI-Generated Code Security Risks: Why “Vibe Coding” Can Break Your App - WC #1
Time to integrate AI into the core of the business
The most successful companies will turn AI into a persistent, intelligent layer that protects the enterprise.
Google releases emergency update for fifth Chrome zero-day exploited in the wild this year
Microsoft investigates breach of open-source projects after malware injection
The compromised projects, many of which are related to Microsoft's Azure cloud service and AI development tools, allowed attackers to steal user passwords an...
SoFi Hong Kong warns of data breach after third-party vendor compromise
The breach involves a database managed by a third-party vendor used by SoFi Securities (Hong Kong) Limited.
Apple Intelligence to automatically fix weak passwords with iOS 27
Apple states that its built-in password manager and Safari will now use AI to "agentically" act on user behavior to automatically secure passwords.
Suspected North Korean actors use fake ‘coding assignments’ to steal crypto
Targets are encouraged to clone Git repositories to their VS Code or Cursor code editors.
Scanner Results Are a Starting Point. Here's What Comes Next. - Federico Kirschbaum - ASW #386
American citizen pleads guilty to spying for China
Thomas Weir Pauken II, 50, admitted to conspiring with multiple individuals to exfiltrate data for the Chinese government.
Check Point patches critical VPN flaw exploited in zero-day attacks
This vulnerability affects deployments configured to use the deprecated IKEv1 key exchange protocol.
FTC orders Illuminate Education to improve data security after student data breach
The FTC's order stems from allegations that Illuminate failed to implement reasonable security controls, contributing to a December 2021 cyberattack.