Leading infrastructure-operator associations want lawmakers to renew the program for another 10 years.
Category: EN
Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization…
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating…
Q&A With Pierre-Loic Kuhn at Filigran: Why Cybersecurity Needs to Evolve
For years, cybersecurity teams have relied on vulnerability scanning and periodic penetration testing to identify weaknesses before attackers can exploit…
European Supermarket Freezers Set to 122°F in Suspected Hacks
Suspected cyberattacks disrupted refrigeration across seven European countries. Learn how stores were affected and what EMEA retailers should do next.
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
UEFI bootkit BlackX exploits Microsoft’s lack of clarity around Secure Boot protections.
3AM Ransomware Hits 37 UK School Systems in Suspected AI-Assisted Attack
Bitdefender details a 3AM ransomware attack on a UK school estate that encrypted 37 systems, with command timing suggesting possible AI-assisted…
DreamHost Confirms Data Breach After Hackers Steal FTP/SFTP Credentials and Access Customer Emails
DreamHost has confirmed a security breach involving its browser-based File Manager, which exposed FTP/SFTP usernames and passwords, as well as the…
Subnet Solutions PowerSYSTEM Center
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to…
Healthcare can’t govern the AI tools it hasn’t found yet
Nearly nine in ten healthcare leaders say security or compliance staff always or usually review AI-written code that touches patient data before it goes…
OpenAI’s New Cyber AI Model Finds 948 Linux Privilege Escalation Vulnerabilities in Just 10 Days
OpenAI has developed an autonomous pipeline that discovers, validates, exploits, and patches flaws in the Linux kernel. In a single run in mid-October…
Citizen Lab Researchers Win IRTF Applied Networking Research Prize
Researchers from the Citizen Lab and Princeton have won the IRTF Applied Networking Research Prize for their work on the network security of Android apps.
Hackers Use ClickFix Tricks to Infect Macs With Phexia Malware That Hides Through Blockchain Infrastructure
Phexia, a modular macOS backdoor and infostealer sold to multiple threat actors. Operators deliver it through ClickFix lures. Since May 2026, newer builds…
Wordfence Price Increase Coming December 3, 2026
On Thursday, December 3, 2026, pricing for Wordfence Premium, Care, and Response will increase. We’re announcing this change a month in advance so you…
Hackers Exploit Zyxel GS1900 Zero-Day Vulnerability to Compromise Nearly 1,000 Network Switches
Attackers used a pre-authentication remote code execution exploit against Zyxel GS1900 switches. They compromised nearly 1,000 devices before Zyxel…
OpenAI Unveils AI Pipeline That Found & Patched 948 Linux Root Exploits
HOC Shorts | OpenAI published “A thousand fewer paths to root,” detailing an autonomous security research ai pipeline…
New York City’s Mamdani criticizes Madison Square Garden owner over surveillance tech
The mayor’s comments come after the entertainment giant’s data breach last year, which exposed James Dolan’s surveillance.
Spring Security JWT Validation Best Practices
A few months into a large-scale legacy-to-cloud migration for a Fortune 50 insurance carrier, I found something that had been sitting quietly in our…
Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting
Rumors of malfeasance spread on X despite no evidence, as election officials continue to fight off numerous legal challenges from the Trump administration…
Companies are spending more on AI governance and getting less control
Companies are increasing their cybersecurity budgets, with AI security and governance the top priority for additional spending, followed by cloud…