News
Plain-English guides on web security, compliance, and keeping your clients protected.
Retired General Paul Nakasone, the former director of the National Security Agency, has called for stronger protections around US water infrastructure following a series of suspected intrusions affect...
Read article →Security researchers have identified almost 800 packages on the npm registry that appear to be part of a campaign distributing remote-access malware and information-stealing tools to Windows, macOS, a...
Read article →A large-scale study of more than 6,000 software patches found that AI-generated fixes frequently fail to provide a reliable solution. According to the findings, roughly half of the patches examined we...
Read article →OpenAI is gradually introducing updates to ChatGPT that aim to improve response accuracy, consistency, and control over how much reasoning the service applies to a request.Subscribers on the Plus and...
Read article →Connor Riley Moucka has pleaded guilty in a US federal court for his alleged role in a cybercrime operation that compromised Snowflake data-storage accounts belonging to 165 organizations.The 26-year-...
Read article →Connor Riley Moucka, a 26-year-old man from Kitchener, Ontario, has pleaded guilty in the United States to charges stemming from a campaign that allegedly targeted more than 165 organizations using Sn...
Read article →Security researchers at Check Point say the main risk in many AI agent systems is not prompt injection alone, but the way agent frameworks process content that an attacker can influence. Their finding...
Read article →Microsoft has identified a macOS-focused ClickFix operation using more than 250 front-end domains to screen visitors before displaying a malicious lure. The campaign’s infrastructure fingerprints brow...
Read article →CSS is best known as the language used to control the appearance of websites and online documents. Security researchers are now drawing attention to a less obvious risk: carefully crafted stylesheets...
Read article →TP-Link has released fixes for 15 vulnerabilities affecting the zero-touch provisioning (ZTP) system used by its Omada networking products. Researchers at Forescout’s Vedere Labs say the issues could...
Read article →Security vendors used Black Hat USA 2026 in Las Vegas to announce new products, platform updates, research and initiatives spanning vulnerability management, artificial intelligence, data protection a...
Read article →The UK’s National Cyber Security Centre (NCSC) has warned that recent incidents observed during evaluations of frontier artificial intelligence systems demonstrate the need for stronger controls as ad...
Read article →