Latest News

The November 2025 Android patches resolve two vulnerabilities, both in the platform’s System component.

Yuriy Igorevich Rybtsov, aka MrICQ, was arrested in Italy and lost his appeal to avoid extradition to the US.

To deploy AI tools securely and ethically, teams must balance innovation with accountability—establishing strong governance, upskilling developers, and enforcing rigorous code reviews.

Kolter leads a panel at OpenAI that has the authority to halt the ChatGPT maker’s release of new AI systems if it finds them unsafe.

CISO burnout is increasing. Are we simply more aware of the condition? Or have demands on the CISO grown and burnout is now the inevitable result? 

An attacker can inject indirect prompts to trick the model into harvesting user data and sending it to the attacker’s account.

Significant cybersecurity M&A deals announced by Jamf, LevelBlue, Ping Identity, Twilio, and Veeam Software.

PowerShell and .NET variants of the malware abuse AirWatch’s MDM API to establish a C&C communication channel.

The two bugs are high-severity type confusion and inappropriate implementation issues in the browser’s V8 JavaScript engine.

Other noteworthy stories that might have slipped under the radar: several interesting Android malware families, UN cybercrime treaty, criminal complaint against Clearview AI in Europe.

Oleksii Oleksiyovych Lytvynenko is now in the US after being held in custody in Ireland since 2023.

Open VSX fully contained the GlassWorm attacks and says it was not a self-replicating worm in the traditional sense.

Broadcom has updated its advisory on CVE-2025-41244 to mention the vulnerability’s in-the-wild exploitation.

The private equity firm will purchase the outstanding shares of Jamf common stock for $13 per share in an all-cash transaction.

The Windows shortcut vulnerability has been seen in attacks conducted by Mustang Panda to drop the PlugX malware.