Latest News

The goal of the guidance, which outlines minimum elements, is to help organizations enhance transparency in AI systems and supply chains. 

The company’s latest quarterly advisory describes high and medium-severity issues in BIG-IP, BIG-IQ, and NGINX.

The first exploitation attempts were observed less than four hours after the authentication bypass was publicly disclosed.

The patch was announced as Broadcom is attending the Pwn2Own hacking competition in Berlin this week.

YellowKey is a BitLocker bypass that requires physical access. GreenPlasma enables elevation of privileges to System.

The Nitrogen ransomware group claims to have hacked the company’s systems, stealing 8TB of data, including confidential documents.

Microsoft’s MDASH discovered 16 of the Patch Tuesday vulnerabilities, and Palo Alto used Mythos to find dozens of flaws. 

New “Sweet Attack” platform uses runtime intelligence and continuous agentic red teaming to identify exploitable attack chains human teams may miss.

This webinar will help OT security teams and asset owners stop being cost centers and start being resilience drivers.

The Committee on Homeland Security has requested to be briefed on the incident and Instructure’s remediation steps.

The telehealth platform was hacked in January, and users’ personal information was exfiltrated from its systems.

CVE-2026-40361 is similar to a vulnerability found a decade ago, BadWinmail, which at the time was dubbed an “enterprise killer”.

Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure.

The two chip giants have published over two dozen advisories describing recently identified security defects.

More than 500 packages were pushed during the attack, but the target appears to have been RubyGems itself rather than users.