Latest News

Join the webcast as we explore what Agentic AI can and cannot solve today, and real world breach scenarios linked to disconnected applications.

A long-lived NPM access token was used to bypass the GitHub Actions OIDC-based CI/CD publishing workflow and push backdoored package versions.

Palo Alto Networks has disclosed the details of its analysis of Google Cloud Platform’s Vertex AI.

The latest funding round brings the total venture capital investment in Censys to $149 million.

Data integrity shouldn’t be seen only through the prism of a technical concern but also as a leadership issue.

Report shows how industrialized credential theft underpins ransomware, SaaS breaches, and geopolitical attacks, shifting security focus from prevention to detecting misuse of legitimate access.

Licensed malware with built-in persistence and automation enables attackers to continuously siphon credentials, session data, and cryptocurrency assets.

After validating stolen credentials using TruffleHog, the hacking group started AWS services enumeration and lateral movement activities.

Attackers can exploit the bugs through prompt injection, chaining them together to escape the sandbox and execute arbitrary code.

Google researchers have shown that breaking the encryption of Bitcoin and Ethereum requires 20x fewer qubits. 

The SQL injection vulnerability allows unauthenticated attackers to execute arbitrary code remotely, via crafted HTTP requests.

Remotely exploitable, the integer underflow vulnerability impacts StrongSwan releases spanning 15 years.

A faulty software update led to the exposure of mobile banking users’ transactions to other users of the application.

Researchers found an OpenAI Codex vulnerability that could have been exploited to compromise GitHub tokens.

The company has disclosed a cybersecurity incident involving one of its electronic health record environments.