Latest News

Unauthenticated attackers can exploit the flaw via specially crafted POST requests that crash the Serv-U service.

The social media giant has informed authorities about the impact of the recent attack involving an account recovery support tool.

Emphere’s solution delivers AI-driven remediation to software companies to speed up releases.

Raising $59 million to date, Opal also announced five senior leadership appointments.

CVE Lite CLI is a free, open-source command line tool that scans your projects in seconds and tells you exactly which included packages contain a vulnerability.

Other noteworthy stories that might have slipped under the radar: Ultrahuman data leak, The Gentlemen ransomware analysis, Hola Browser bundles miner.

The ShinyHunters extortion group leaked roughly 234 GB of data allegedly stolen from the dental benefits administrator.

Over 100 bugs are critical or high-severity, mainly use-after-free and insufficient validation of untrusted input flaws.

Experts commented on the EO’s voluntary nature, the balance between innovation and security, and potential implementation gaps.

Posing as recruiters on online platforms, Chinese intelligence officers target personnel with access to classified or privileged information.

The company detected a network intrusion in March and an investigation showed that some files were stolen during the attack.

The vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet.

As AI agents, machine identities, and third-party applications multiply across enterprises, Offroad is betting autonomous security agents can restore control over an increasingly unmanageable identity landscape.

Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Willow (formerly Webrix) emerged from stealth mode with an access platform designed to secure enterprise AI agents.