News
Plain-English guides on web security, compliance, and keeping your clients protected.
More than 30 community water systems in Minnesota were reportedly targeted by an actor believed to have ties to Iran, highlighting the growing cyber risk facing U.S. critical infrastructure.The incide...
Read article →The UK National Cyber Security Centre (NCSC) is calling on manufacturers and customers to make forensic observability a standard feature of firewalls, VPN gateways and other network appliances.These d...
Read article →Security researchers are warning that some low-cost TV streaming devices may be doing far more than delivering video. A new analysis from Bitsight links a widely sold class of H96 Android-based boxes...
Read article →Anthropic is investigating a service disruption affecting Claude and applications that depend on the company’s API. Users reported failed requests and elevated latency across multiple Claude models on...
Read article →The U.S. Federal Communications Commission has barred the authorization of new foreign-made humanoid and quadruped robots, citing cybersecurity, supply-chain and broader national security concerns. Th...
Read article →Security researcher Daniel Fox Franke says automated safety controls on a closed AI service repeatedly prevented him from using the system to investigate crashes involving the open-source utility ripg...
Read article →Anthropic says its Claude Mythos Preview research system helped develop two cryptanalytic results: an end-to-end key-recovery attack against the HAWK-256 challenge parameter and a substantially faster...
Read article →Security researcher Aleksandr Krasnov is drawing attention to the risks posed by dormant non-human identities (NHIs) in cloud environments. These identities include service accounts, application crede...
Read article →The UK’s National Cyber Security Centre (NCSC) has published guidance designed to help organisations manage and recover from highly disruptive cyber attacks. The framework recognises that a major inci...
Read article →Arista has released patches for a critical vulnerability in on-premises VeloCloud Orchestrator (VCO) after confirming that attackers are exploiting the flaw in the wild.Tracked as CVE-2026-16812, the...
Read article →GitHub and the Python Package Index (PyPI) are introducing measures designed to limit two software supply chain risks: the rapid distribution of malicious new releases and the later modification of ve...
Read article →Microsoft has introduced a group of AI security initiatives that use multiple specialized models and coordinated agents to identify, investigate, and remediate software vulnerabilities.At the company’...
Read article →