Current analysis, technical guidance and reporting across security, infrastructure, automation and artificial intelligence.
The usbliter8 exploit exposed an immutable Apple SecureROM flaw. A court order removed the original research, but it could not remove the vulnerability or copies already distributed.
A malicious page could use Adobe's Acrobat Chrome extension to read WhatsApp Web content across the browser's same-origin boundary. Adobe patched the chain quickly.
Cloudflare’s Precursor analyses behaviour across a browsing session before a sensitive action occurs. The technique may catch modern automation, but it also raises privacy, accessibility and failure-mode questions. Cloudflare made Precursor generally available on 13 July as an optional capability…
Two FortiSandbox command-injection flaws are in CISA's exploited catalogue, while a related authentication bypass was reported under attack one month earlier.
The Gambia has assented to a modern privacy framework covering extraterritorial processing, data rights, security, breaches and transfers.
July 2026 Patch Tuesday covers 135 approved patch records and 682 unique CVEs across Microsoft, Adobe and SAP.
SonicWall confirmed exploitation of two SMA1000 vulnerabilities. If compromise indicators are present, defenders must rebuild the appliance and reset credentials, not merely install the hotfix.
Compare crime reports, operational incidents and breach notifications without creating a misleading total. Keep definitions and reporting periods visible.
Mandiant’s M-Trends 2026 report, published 23 March 2026, puts a number on something defenders have felt for a while: the mean time to exploit (MTTE) a vulnerability is now an estimated -7 days. Exploitation is routinely happening before a patch…
A breach reported by AssuranceAmerica affected 6,998,886 people and included driver-licence information. The long-term risk is identity abuse, not only an immediate phishing campaign. US motor insurer AssuranceAmerica began notifying people after an incident affecting 6,998,886 individuals. Public notices and…
WP-SHELLSTORM's exposed server showed how target lists, validated compromises and active webshells are different measures of a mass-exploitation operation.
Recovery planning should prioritise the work people must complete. Test dependencies, reconnection decisions and acceptance evidence.
