Latest News

The security defect allows remote attackers with administrative privileges to execute arbitrary code as the root user.

Boyd Gaming has informed the SEC about a data breach affecting the information of employees and other individuals.

The hackers remained undetected for three weeks, deploying China Chopper, remote access scripts, and reconnaissance tools.

Cybersecurity researchers believe the attack on Collins Aerospace involved a piece of ransomware known as HardBit.

GitHub will implement local publishing with mandatory 2FA, granular tokens that expire after seven days, and trusted publishing.

The attack was aimed at a European network infrastructure company and it has been linked to the Aisuru botnet.

The software update includes additional file checks and helps users remove the known rootkit deployed in a recent campaign.

Tracked as CVE-2025-59689, the command injection bug could be triggered via malicious emails containing crafted compressed attachments.

JLR extended the pause in production “to give clarity for the coming week as we build the timeline for the phased restart of our operations and continue our investigation.”

More than 300 servers and 100,000 SIM cards designed to mimic cellphones and overwhelm networks.

Binarly researchers have found a way to bypass a patch for a previously disclosed vulnerability. 

CVE-2025-26399 is a patch bypass of CVE-2024-28988, which is a patch bypass of the exploited CVE-2024-28986.

The company will expand its platform’s capabilities and accelerate investigative collaboration and go-to-market efforts.

The strength of responsible disclosure is that it can solve problems before they are actioned. The weakness is that it potentially generates a false sense of security in the vendor.

A new ranking of Model Context Protocol weaknesses highlights critical risks—from prompt injection to command injection—and provides a roadmap for securing the foundations of agentic AI.