News
Plain-English guides on web security, compliance, and keeping your clients protected.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has directed federal civilian agencies to address an actively exploited authentication bypass flaw in Langflow, a visual development pl...
Read article →Ubiquiti has issued security updates for seven critical vulnerabilities affecting UniFi OS and related applications. The most serious issue, tracked as CVE-2026-50746, carries a maximum severity ratin...
Read article →The U.S. Cybersecurity and Infrastructure Security Agency has directed federal civilian agencies to patch a maximum-severity Adobe ColdFusion vulnerability by Friday after the flaw was added to its Kn...
Read article →Security researchers say a phishing campaign observed from late June into early July 2026 abused Microsoft’s device-code authentication flow to target Microsoft 365 users. According to ZeroBEC, the op...
Read article →Google has patched a serious security issue in Dialogflow CX that could have allowed an attacker with limited edit privileges to take over other chatbots in the same Google Cloud project, according to...
Read article →A new Android fraud operation tracked as RedWing is being marketed on Telegram as a turnkey malware service, lowering the technical barrier for attackers looking to steal banking credentials and one-t...
Read article →A US Justice Department complaint against Peter Stokes, who is accused of involvement with the Scattered Spider cybercrime group, highlights how operating-system and service telemetry can help investi...
Read article →Security researchers at Noma Labs say they have uncovered a prompt-injection weakness in GitHub’s Agentic Workflows that can be abused to pull information from private repositories and post it publicl...
Read article →A phishing campaign is reportedly targeting marketing professionals by impersonating job-related opportunities and steering victims toward fake sign-in pages designed to harvest Google credentials.Res...
Read article →Google has addressed a security issue in Dialogflow CX that could have allowed an unauthorized or misconfigured agent to gain access to chatbot-related data, according to researchers at Varonis.The fl...
Read article →Researchers at Noma Security say a public GitHub issue can be used to manipulate GitHub Agentic Workflows into exposing data from private repositories, highlighting a new class of risks tied to AI-dri...
Read article →Security researchers say a new cloud-focused worm is spreading through developer and container environments, stealing credentials, mining cryptocurrency, and removing competing malware from infected s...
Read article →