News that matters, without the noise.

Patch Now: Critical Flaw in OT Robot OS Gives Attackers Control

An unauthenticated attacker can exploit the command injection vulnerability to gain remote access to robotic systems, causing significant

Grafana breach caused by missed token rotation after TanStack attack

The Grafana data breach was caused by a single GitHub workflow token that slipped through the rotation process

Identity Alone Isn’t Enough: Why Device Security Has to Share the Load

Identity checks alone can’t stop attackers using stolen session tokens and compromised devices. Specops Software outlines why Zero

Infosecurity Europe

Drupal critical update to fix bug with high exploitation risk

Drupal has announced a “core security release” scheduled for later today, warning that threat actors might develop exploits

Exploit released for new PinTheft Arch Linux root escalation flaw

PinTheft, a recently patched Linux privilege escalation vulnerability, now has a publicly available proof-of-concept (PoC) exploit that allows

GitHub confirms breach of 3,800 repos via malicious VSCode extension

GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious

Microsoft shares mitigation for YellowKey Windows zero-day

Microsoft has shared mitigations for YellowKey, a recently disclosed Windows BitLocker zero-day vulnerability that grants access to protected

Interpol’s ‘Operation Ramz’ Pioneers Cross-Region Collabs in Middle East

While the numbers are modest, the crackdown on cybercrime involved 13 countries in the MENA region, the largest

What Will Make AI BOMs Real?

A brief overview of the forces at play that will get more organizations on board with creating and

Windows Zero-Day Barrage Continues After Patch Tuesday

YellowKey, GreenPlasma, and MiniPlasma add to the growing list of vulnerabilities a security researcher disclosed over the past

Verizon DBIR: Enterprises Face a Dangerous Vulnerability Glut

Verizon’s “2026 Data Breach Investigations Report” (“DBIR”) finds that exploits are now involved in 31% of initial access