News
Plain-English guides on web security, compliance, and keeping your clients protected.
Security researchers have reported a new way to mislead large language models into ignoring safety boundaries by taking advantage of how models interpret role-based prompts. The work suggests that cur...
Read article →Russian influence activity is increasingly shifting away from its near-exclusive emphasis on Ukraine and back toward the United States and Europe, according to a new report from Google Threat Intellig...
Read article →The National Institute of Standards and Technology has reduced the number of CVEs it reviews in depth, a change that researchers say has affected both the reach and quality of its vulnerability enrich...
Read article →An anonymous researcher using the handle bikini has published a GitHub repository containing proof-of-concept exploit code and write-ups for alleged zero-day vulnerabilities affecting 15 products and...
Read article →A credential-stealing malware strain known as Djinn has been associated with a delivery chain that exploits a critical authentication bypass flaw in SimpleHelp, identified as CVE-2026-48558. The activ...
Read article →A security researcher has identified multiple vulnerabilities affecting Indian government systems, including one issue described as critical that may have allowed an attacker to take control of a nati...
Read article →Concerns about facial recognition in public spaces have prompted researchers to look for ways ordinary people might reduce how easily they are identified. One proposed approach is clothing with bold,...
Read article →Security researchers say water and wastewater facilities are being probed and sometimes breached by state-backed threat actors, with activity tied to Iran, Russia, and China. The attacks described do...
Read article →Artificial intelligence is increasingly being used to help security teams identify software weaknesses, but a new reminder from the cybersecurity world suggests that many of the easiest attacks still...
Read article →Microsoft has confirmed that hotpatching for Windows Server 2022 will remain available into 2027, extending the feature beyond the operating system’s mainstream support period. The update appears on M...
Read article →Nissan has told current and former employees that a cyber incident tied to Oracle’s PeopleSoft software may have exposed sensitive personal and payroll information, including bank account details, tax...
Read article →A security issue in the Amazon Q Visual Studio Code extension could allow attackers to abuse a malicious repository, run arbitrary code, and harvest cloud credentials from a developer environment, acc...
Read article →