Aggregated from vendor advisories, security research, and industry publications.
Security teams have never had better visibility into their environments and never been worse at confirming what they fix stays fixed. Mandiant's M-Trends 2026 report puts the mean time to exploit at an estimated negative seven days. The Verizon 2025 DBIR puts median time to remediate edge device vulnerabilities at 32 days. These numbers have understandably driven the industry toward a clear
The telehealth platform was hacked in January, and users’ personal information was exfiltrated from its systems. The post 716,000 Impacted by OpenLoop Health Data Breach appeared f…
The UK’s AI Security Institute evaluated GPT-5.5’s ability to find security vulnerabilities, and found that it is comparable to Claude Mythos. Note that the OpenAI model is general…
Blog post mourning decline appears to have helped knock what was left of the veteran app's online presence offline
Microsoft on Tuesday released patches for 138 security vulnerabilities spanning its product portfolio, although none of them have been listed as publicly known or under active atta…
CVE-2026-40361 is similar to a vulnerability found a decade ago, BadWinmail, which at the time was dubbed an “enterprise killer”. The post Microsoft Patches Critical Zero-Click Out…
Chromium extension swaps promos for John Carpenter-style subliminal slogans
Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure. The post Fortinet, Ivanti Patch Critical Vulnerabilities appeared first on…
CEO says there is 'no confusion at all' after cloud-only innovation plan drew flak
The two chip giants have published over two dozen advisories describing recently identified security defects. The post Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabiliti…
Leveraging 10G PON, light OTN, and Wi-Fi 7 to modernize infrastructure and reduce operational costs for local operators
Union demands government strips outsourcer of contract after delays, bereavement failures, and data breach
Empowering operators to move beyond basic connectivity with next-gen AI and ODN systems
Cybersecurity researchers are calling attention to a new campaign dubbed GemStuffer that has targeted the RubyGems repository with more than 150 gems that use the registry as a dat…
Empowering Brazilian ISPs with next-gen Wi-Fi 7 infrastructure
More than 500 packages were pushed during the attack, but the target appears to have been RubyGems itself rather than users. The post Hundreds of Malicious Packages Force RubyGems …
That's fine when playing poker, but less useful when we trust LLMs with serious work like finding software flaws
CVSSv3 Score: 7.8 CVE-2026-31431In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts …
Google on Tuesday unveiled a new opt-in Android feature called Intrusion Logging for storing forensic logs to better analyze sophisticated spyware attacks. Intrusion Logging, avail…
Many ICS vendors have not released new advisories for the May 2026 Patch Tuesday. The post ICS Patch Tuesday: New Security Advisories From Siemens, Schneider, CISA appeared first o…
Where it’s been well and truly forked, seemingly without Microsoft’s code locker noticing
Class A drugs loaded instead of A4
Communist government plans personalized ‘data-driven decision-making based on real-time information’ by 2035
As suits say they're burning cash on brainboxes without seeing results
The good news: no 0-days. The bad news: busy week ahead for Microsoft admins
The U.S. House Committee on Homeland Security is calling on Instructure executives to testify about two cyberattacks by the ShinyHunters extortion group that targeted the company's…
'What the hell is going on? It's just draining my money'
Affected factories back up and running, we're told
Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in huma…
If you're not a fan of having AI baked into your OS, look elsewhere