Current analysis, technical guidance and reporting across security, infrastructure, automation and artificial intelligence.
Reco has linked sustained Salesforce and ServiceNow probing to one IP and a custom Go toolset, exposing how over-permissioned guest identities become cross-platform data-extraction paths.
Microsoft’s August 2026 updates fix a WinSock privilege-escalation flaw used by North Korea’s Lazarus group against defence, aerospace and aviation organisations. The exploit helped Operation Dream Job turn a local Windows foothold into SYSTEM access, deploy a kernel rootkit and interfere with endpoint-security controls.
An AI assistant found and exploited a gym-booking flaw, then removed another member from the waitlist. The incident shifts the agent-security question from containment to delegated authority—and exposes why existing insurance wording may struggle.
OpenAI has committed $1 billion in subsidised Daybreak access and support for frontline defenders, with consumption targeted over the next six months.
Microsoft has identified a new ransomware strain deployed by China-linked Storm-1175. The campaign coincides with active exploitation of N-able N-central, although the specific entry route remains unconfirmed.
Zoom has patched a set of memory-safety vulnerabilities that researchers combined into a zero-click remote-code-execution attack through the live-meeting annotation protocol. A malicious participant could target a presenter, while a malicious presenter could reach participants across Windows, macOS, iOS and…
128 approved operational patch records from Microsoft, Adobe and SAP, with 537 linked unique CVEs and 14 accelerated BlackTree actions.
Malware forced Suisun City to shut down its entire IT network, disrupting 911 routing and police and fire dispatch. A county-level failover kept emergency calls and field response operating.
When criminals stop attacking infrastructure and start applying pressure to the people who run it, cybersecurity becomes a question of leadership, duty of care and organisational design. Editor’s note: This article was inspired by “Ransomware gangs skip the CEO, head…
A crafted namespace header can bypass Nuclio's earlier command-injection fix and turn a local Docker dashboard into host-level root access.
CRA Article 14 reporting is now operational. ENISA's portal has no API, and its 72-hour display can run early, so manufacturers must calculate legal deadlines independently from the awareness timestamp.
MIT researchers demonstrated that branch-predictor defences can be re-poisoned in the brief interval between being cleared and being used. This is a local attack, not a drive-by remote compromise. At Black Hat USA on 6 August, MIT researchers Daniël Trujillo…
