News that matters, without the noise.

Tech Can’t Stop These Threats — Your People Can

Security controls can do only so much. Here are four attacks where your employees are usually your first,

Official CheckMarx Jenkins package compromised with infostealer

Checkmarx warned over the weekend that a rogue version of its Jenkins Application Security Testing (AST) plugin had

New GhostLock tool abuses Windows API to block file access

A security researcher has released a proof-of-concept tool named GhostLock that demonstrates how a legitimate Windows file API can be

RHSA-2026:16056: Important: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

DSA-6264-1 dnsmasq – security update

https://security-tracker.debian.org/tracker/DSA-6264-1

Apple security advisory (AV26-446)

<article data-history-node-id="7675" about="/en/alerts-advisories/apple-security-advisory-av26-446" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

JetBrains security advisory (AV26-445)

<article data-history-node-id="7674" about="/en/alerts-advisories/jetbrains-security-advisory-av26-445" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack

Checkmarx has confirmed that a modified version of the Jenkins AST plugin was published to the Jenkins Marketplace.

Why Humans Should Stop Doing Routine Work

Broadcom VMware security advisory (AV26-444)

<article data-history-node-id="7673" about="/en/alerts-advisories/broadcom-vmware-security-advisory-av26-444" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation

Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said

CVE-2026-42595

High Severity Description Gotenberg: Server-Side Request Forgery via Chromium URL Endpoint with Redirect-Based Deny-List Bypass Read more at