News that matters, without the noise.

Claude Security’s public beta, OpenAI’s five-point plan and cybersecurity’s Y2K moment

Rowhammer Attack Against NVIDIA Chips

A new rowhammer attack gives complete control of NVIDIA CPUs. On Thursday, two research teams, working independently of

Vimeo Data Breach Exposes 119,000 Users Unique Email Addresses

In a significant supply chain security incident, the popular video hosting platform Vimeo has confirmed a data breach

CISA: Critical Infrastructure Must Master Isolation, Recovery

The agency has issued guidance to help critical infrastructure operators prepare for cyberattacks by foreign threat actors. The

Sophisticated Quasar Linux RAT Targets Software Developers

The persistent, evasive implant provides remote access, surveillance, and credential exfiltration capabilities. The post Sophisticated Quasar Linux RAT

Google’s Android Apps Get Public Verification to Stop Supply Chain Attacks

Google has announced expanded Binary Transparency for Android as a way to safeguard the ecosystem from supply chain

One in Eight Workers Has Sold Their Corporate Logins

Cifas says that 13% of employees admit selling company credentials to a former colleague

RHSA-2026:13936: Important: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.

RHSA-2026:13923: Moderate: capstone security update

An update for capstone is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.

Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise

In this article Multi-step social engineering campaign leading to credential theft Mitigation and protection guidance Microsoft Defender detections

Azure AD Conditional Access Bypassed Through Phantom Device Registration and PRT Abuse

Cloud identity security relies heavily on Microsoft Entra ID (formerly Azure AD) Conditional Access. It acts as the

Government, Scientific Entities Hit via Daemon Tools Supply Chain Attack

While trojanized Daemon Tools versions were installed worldwide, a sophisticated backdoor was dropped only on a dozen systems.