News
Plain-English guides on web security, compliance, and keeping your clients protected.
An anonymous researcher using the handle bikini has published a GitHub repository containing proof-of-concept exploit code and write-ups for alleged zero-day vulnerabilities affecting 15 products and...
Read article →A credential-stealing malware strain known as Djinn has been associated with a delivery chain that exploits a critical authentication bypass flaw in SimpleHelp, identified as CVE-2026-48558. The activ...
Read article →A security researcher has identified multiple vulnerabilities affecting Indian government systems, including one issue described as critical that may have allowed an attacker to take control of a nati...
Read article →Concerns about facial recognition in public spaces have prompted researchers to look for ways ordinary people might reduce how easily they are identified. One proposed approach is clothing with bold,...
Read article →Security researchers say water and wastewater facilities are being probed and sometimes breached by state-backed threat actors, with activity tied to Iran, Russia, and China. The attacks described do...
Read article →Artificial intelligence is increasingly being used to help security teams identify software weaknesses, but a new reminder from the cybersecurity world suggests that many of the easiest attacks still...
Read article →Microsoft has confirmed that hotpatching for Windows Server 2022 will remain available into 2027, extending the feature beyond the operating system’s mainstream support period. The update appears on M...
Read article →Nissan has told current and former employees that a cyber incident tied to Oracle’s PeopleSoft software may have exposed sensitive personal and payroll information, including bank account details, tax...
Read article →A security issue in the Amazon Q Visual Studio Code extension could allow attackers to abuse a malicious repository, run arbitrary code, and harvest cloud credentials from a developer environment, acc...
Read article →Schools, colleges, and universities are confronting a rising cybersecurity challenge as attacks involving third-party providers continue to expose sensitive information. Security teams in the educatio...
Read article →Security teams may be heading into a difficult summer as advanced AI systems uncover a growing number of previously unnoticed flaws in widely used open source software, according to Chainguard CEO Dan...
Read article →A federal watchdog has found that Secret Service personnel repeatedly relied on personal mobile phones during protective operations, including assignments in the United States and abroad, because agen...
Read article →