Current analysis, technical guidance and reporting across security, infrastructure, automation and artificial intelligence.
Sysdig describes JADEPUFFER as the first documented end-to-end agentic ransomware operation. Its speed changes how defenders should think about containment and AI infrastructure exposure. Sysdig reported an operation it calls JADEPUFFER on 1 July. The attacker exploited an internet-facing Langflow…
Kenya expanded its cybercrime law in 2025, then saw the High Court invalidate administrative website blocking and a vague speech offence in 2026.
Claude, export controls and the case for keeping local models within reach On Tuesday, 9 June 2026, Anthropic released Claude Fable 5 and Claude Mythos 5. Three days later, neither model was available to anyone. The reason was not a…
Adobe fixed 13 ColdFusion vulnerabilities, including six CVSS 10 code-execution flaws. One path-traversal issue was already under attack.
Cisco confirmed active exploitation of a Unified CM WebDialer flaw that let unauthenticated attackers write files and work toward root.
Cameroon's 2024 data protection law is now past its 18-month compliance period, turning privacy governance, breach handling and transfer controls into current obligations.
At least 15 JetBrains plugins posed as AI assistants while stealing provider credentials. The campaign shows why developer tooling needs central governance and short-lived secrets. Security company Aikido reported a coordinated set of malicious plugins in the JetBrains Marketplace. The…
Attackers reportedly breached Belgium's civilian intelligence service through Ivanti EPMM, exposing mobile identity, location and relationship data while the classified network remained sealed.
A French security deadline is about to turn post-quantum support from a roadmap promise into a condition for some trusted products. Procurement teams have even less time than the headline suggests.
An exploited Splunk Enterprise flaw let unauthenticated attackers create or truncate arbitrary files through a PostgreSQL sidecar endpoint.
Cisco ISE's critical command injection required an administrator, while the lower-scored flaw exposed hashed credentials without authentication.
Australia’s critical-infrastructure framework combines mandatory risk management and incident reporting with last-resort government powers to act during a serious cyber incident. Australia has expanded the Security of Critical Infrastructure Act in several waves. Major reforms in 2021 and 2022 broadened…
