News
Plain-English guides on web security, compliance, and keeping your clients protected.
Researchers have disclosed a Linux kernel vulnerability that could allow a malicious virtual machine to escape its sandbox and affect the host system. The issue, tracked as CVE-2026-53359 and nickname...
Read article →Keyfactor has raised a strategic growth investment of more than $1 billion, a deal the company says will support expansion of its identity and cryptographic security platform as organizations prepare...
Read article →BleepingComputer is scheduled to host a live webinar on July 8 focused on how organizations can better defend against modern email-based attacks. The session, titled “Stop chasing alerts: Automating e...
Read article →A long-running Linux kernel bug has been fixed after security researchers showed it could let an attacker escape a virtual machine and run code on the underlying host. The issue, tracked as CVE-2026-5...
Read article →Microsoft plans to change the default behavior of its Windows settings backup feature for certain enterprise devices. Starting with Windows 11 version 26H2, the company says the backup policy will be...
Read article →BeyondTrust has issued security updates for its Remote Support (RS) and Privileged Remote Access (PRA) products after discovering two critical vulnerabilities that could let attackers bypass authentic...
Read article →Microsoft has started testing a new Windows 11 recovery feature called Cloud Rebuild in the latest Insider Preview builds available through the Experimental channel. The company first previewed the op...
Read article →A hacking cluster linked to Iran’s Ministry of Intelligence and Security is using a previously unreported command-and-control framework called Cavern, or Cav3rn, in intrusions aimed at Israeli organiz...
Read article →A newly disclosed vulnerability in Linux’s Kernel-based Virtual Machine (KVM) could let a malicious guest virtual machine interfere with the host system and, in some cases, break out of the guest envi...
Read article →Security researchers say attackers have already started looking for exposed Gitea instances vulnerable to a critical flaw in the platform’s Docker images, just under two weeks after the issue was made...
Read article →Security researchers say a threat group they track as Armored Likho has obtained access to organizations in several countries, including government agencies and electrical power entities in Russia, Br...
Read article →Attackers moved quickly to take advantage of a newly disclosed memory disclosure vulnerability affecting Citrix NetScaler products shortly after researchers made a proof-of-concept exploit public.The...
Read article →