Aggregated from vendor advisories, security research, and industry publications.
GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platform's source code and internal organizations for sale on a cybercrime forum. "While we currently have no evidence of impact to customer information stored outside of GitHub's internal repositories (such as our customers' enterprises,
Five ways CISOs can prepare for consuming AI bills of materials and influence the direction of how they're generated.
Minister demands AI becomes ‘basic expectation for all public entities’
Verizon’s 2026 DBIR finds vulnerability exploitation has overtaken credential abuse as the leading breach vector, as AI accelerates attacks, patching delays worsen, and ransomware …
Claude maker nabs SDK and MCP tooling biz, plans to sunset platform
A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to run arbitrary code on exposed servers. [...]
A brief overview of the forces at play that will get more organizations on board with creating and consuming AI bill of materials (BOM).
Users claim personal family domains are being falsely flagged for commercial use, leaving long-time G Suite Legacy customers facing a pay-up-or-lose-access ultimatum
'Thousands' of US victims, including 12+ machines owned and operated by Redmond
Verizon's 2026 Data Breach Investigations Report (DBIR) finds that exploits are now involved in 31% of initial access for breaches, while patching lags too far behind the bad guys.
Microsoft says it has disrupted a malware-signing-as-a-service (MSaaS) operation that abused the company's Artifact Signing service to generate fraudulent code-signing certificates…
The group claims $100M in losses from flubby system
YellowKey, GreenPlasma, and MiniPlasma add to the growing list of vulnerabilities a security researcher disclosed over the past six weeks.
Chocolate Factory readies always-on agents for searchers
Discord announced that all voice and video calls through the communication platform are now protected by default with end-to-end encryption (E2EE). [...]
Eighty-five percent of organizations have experienced at least one wireless security incident in the last 12 months, while 58% have suffered financial losses, with half of them tal…
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."
The FBI says Americans have lost over $388 million last year to scams using cryptocurrency kiosks, also known as crypto ATMs or Bitcoin ATMs. [...]
A threat actor targeting Microsoft 365 and Azure production environments is stealing data in attacks that abuse legitimate applications and administration features. [...]
Export a profile on Windows, restore it on Linux. Extensions and themes too
I wonder what's in 'external-secret-repo-creds.yaml' and 'AWS-Workspace-Firefox-Passwords.csv'?
It takes a brave company to go up against Nvidia in any market, let alone graphics performance. Intel tried and failed repeatedly, and AMD is barely hanging on. But Bolt Graphics t…
Employers increasingly blind to unauthorized AI use and where their staff are sending proprietary files
Cybersecurity researchers have disclosed details of a new ad fraud and malvertising operation dubbed Trapdoor targeting Android device users. The activity, per HUMAN's Satori Thre…
Microsoft plans to raise the quality bar of Windows 11 drivers, as drivers "sit at the heart of every Windows experience" and connect the OS to the "silicon, components, and periph…
Drupal says attackers may develop an exploit for the vulnerability within hours or days. The post Drupal to Patch Highly Critical Vulnerability at Risk of Quick Exploitation appear…
Aerospace giant rents new system over 5 years to help develop new aircraft
Microsoft has confirmed user reports that the Teams team collaboration app is displaying non-dismissible location prompts on some macOS systems. [...]
Fox Tempest provides a service that cybercriminals use to distribute ransomware and other malware disguised as legitimate software. The post Microsoft Disrupts Malware-Signing Serv…