Ionut Arghire

ReVault vulnerabilities in the ControlVault3 firmware in Dell laptops could lead to firmware modifications or Windows login bypass.

Adobe has released urgent security updates to resolve two AEM Forms vulnerabilities for which proof-of-concept (PoC) code exists.

Approov has raised $6.7 million in Series A funding to advance its mobile application and API security solutions.

Android’s light August 2025 security update resolves an Adreno GPU vulnerability confirmed as exploited in June.

Research demonstrating high-impact cloud and AI security flaws will be rewarded at Microsoft’s Zero Day Quest competition in spring 2026.

Threat actors might be exploiting a zero-day vulnerability in SonicWall firewalls in a fresh wave of ransomware attacks.

CISA and FEMA announced two grants of more than $100 million for state, local, and tribal governments looking to improve cybersecurity.

The US Senate voted to confirm Sean Cairncross as the National Cyber Director, five months after nominalization.

Northwest Radiologists says the personal information of 350,000 Washington State residents was stolen in a January 2025 data breach.

Attackers could silently modify sensitive MCP files to trigger the execution of arbitrary code without requiring user approval.

Valid, complete reports detailing remote code execution or elevation of privilege bugs in .NET qualify for the maximum rewards.

Russian state-sponsored APT Secret Blizzard has used ISP-level AitM attacks to infect diplomatic devices with malware.

Safe has raised $70 million in Series C funding to advance cyber risk management through specialized AI agents.

Two US senators introduced a bipartisan bill to help prepare federal government agencies for quantum computing threats.

Reach Security has received a $10 million strategic investment from M12 to advance its domain-specific AI approach for exposure management.

The tool includes resources to help organizations during the containment and eviction stages of incident response.

SentinelLabs connects the dots between prolific Chinese state-sponsored hackers and companies developing intrusion tools.

Google Project Zero now publicly shares the discovery of a vulnerability and when its 90-day disclosure deadline expires.

Legion has raised $38 million in seed and Series A funding for its browser-native AI Security Operations Center (SOC) platform.

Multiple financially motivated threat actors are targeting backup systems and employing Scattered Spider’s social engineering techniques.