News
Plain-English guides on web security, compliance, and keeping your clients protected.
Municipal governments with limited technology budgets are being encouraged to seek help from cybersecurity professionals as they work to protect public services and sensitive information.City agencies...
Read article →An attacker compromised a Rust package maintainer account and used it to distribute malware through three widely used crates, according to analyses from StepSecurity, Wiz, SafeDep and Aikido. The affe...
Read article →The UK’s National Cyber Security Centre (NCSC) is urging organisations to apply layered safeguards when deploying agentic artificial intelligence systems that can make decisions and perform actions wi...
Read article →SecurityWeek is hosting CodeSecCon today, August 19, 2026, a virtual event focused on application security, secure software development and the challenges introduced by artificial intelligence. More t...
Read article →Five U.S. federal agencies are warning that attackers are using artificial intelligence to develop tools aimed at internet-accessible Siemens S7 Series programmable logic controllers (PLCs) used acros...
Read article →Security researchers have disclosed a remote Spectre side-channel attack that extracted a JSON Web Token (JWT) from a co-located Cloudflare Worker at a rate of up to 12 bits per second. The result is...
Read article →Organizations that operate self-managed GitLab installations may face additional difficulty assessing exposure to CVE-2026-19478, a reported critical zero-click vulnerability. The available informatio...
Read article →Comcast is promoting a motion-detection feature that uses changes in household WiFi signals to identify movement, without requiring cameras or dedicated motion sensors. The capability is part of the c...
Read article →A SecurityWeek webinar scheduled for August 18, 2026, will examine whether conventional detection-led security operations can respond effectively as artificial intelligence accelerates both cyberattac...
Read article →A threat actor using the name “TheHatman” is offering millions of employee records allegedly taken from Microsoft Azure environments belonging to nine large organizations, according to threat-intellig...
Read article →GitLab has issued an out-of-band security update for a critical vulnerability in its Community Edition (CE) and Enterprise Edition (EE) products. Under certain conditions, the flaw could allow an unau...
Read article →Security researchers have identified an exploit chain that combines two vulnerabilities in Unisoc modem technology to compromise an Android device. The attack reportedly begins when an attacker delive...
Read article →