News
Plain-English guides on web security, compliance, and keeping your clients protected.
Israeli startup QIZ Security said it has secured $17 million in seed funding to support its cryptographic posture management and post-quantum cryptography (PQC) platform. The round was led by Bessemer...
Read article →Security analysts say organizations should not assume they are safe simply because they are not part of a critical infrastructure sector. Recent guidance tied to Iranian cyber activity suggests that a...
Read article →A leaked transcript and supporting artifacts suggest that an unidentified US county paid $1 million to an extortion group after criminals claimed to have taken more than 2 TB of data. The episode, des...
Read article →A cybersecurity startup called IRIS C2 is advertising large payments for zero-day exploits and other offensive capabilities, according to its website and social media accounts. Public records and corp...
Read article →Mount Royal University in Calgary has confirmed that it suffered a cyberattack in June that led to unauthorized access to some data and disruption across several campus systems.In a notice posted on i...
Read article →Sophos has reported that several popular AI coding assistants are generating endpoint activity that resembles attacker behavior closely enough to trigger security controls designed for intrusion detec...
Read article →Cisco Talos says a China-aligned threat group tracked as UAT-7810 is continuing to build out an Operational Relay Box (ORB) network by compromising internet-facing networking gear and deploying update...
Read article →Security researchers at Nebula Security have disclosed a long-standing Linux kernel vulnerability, tracked as CVE-2026-43499 and nicknamed GhostLock, that can let a local user gain full root privilege...
Read article →The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after determining that they are being used in activ...
Read article →The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned organizations about active exploitation of critical flaws in Adobe ColdFusion, Langflow, and two Joomla extensions, urging r...
Read article →Security researchers at Noma Labs have identified a critical prompt injection weakness in GitHub Agentic Workflows that could let an unauthenticated attacker expose data from private repositories. The...
Read article →Estonia, long known for its advanced digital government services, may be considering a new step in online identity: giving AI agents a way to interact with public systems on behalf of people or organi...
Read article →