News that matters, without the noise.

You Have More OAuth Grants Than You Think (And Nudge Security Can Prove It)

Wazuh SOC Challenge – Video 3 Recap

Canadian pleads guilty to Snowflake cloud data-theft attacks

A Canadian man pleaded guilty today to his role in accessing company accounts at cloud storage provider Snowflake

Chinese telcos maintain deep US presence despite Salt Typhoon links, House committee says

Three Chinese telecommunications giants continue to have footholds in the U.S. internet ecosystem despite their alleged role in

DHS Wants Protesters’ Signal Group Chats

A lawsuit accuses Homeland Security of violating protesters’ free-speech rights—but the agency is using it to try to

Anthropic’s AI used fake identities, malware in rogue attack on GitHub project

Routine cybersecurity testing of frontier AI models sparked a series of unexpected security incidents—the most serious case arising

CSS: The Hidden Threat Lurking in Your Inbox

CSS was once just about design. Now researchers warn it’s powerful enough to exfiltrate data from webmail —

Canadian man pleads guilty to Snowflake hacks that led to 165 breaches

A 26-year-old from Ontario faces as many as 32 years in prison after pleading guilty to fraud, identity

The Most Dangerous AI Hacking Techniques Still Have Humans in the Loop

Security researcher James Kettle tried to push the limit of AI’s hacking abilities—and discovered how effective it can

How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones 

The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications. The post

15 TP-Link Bugs Expose Risks in Zero-Trust Provisioning

Researchers are calling attention to the risks inherent in automated network device provisioning, using a world-leading device manufacturer

Hackers run khunt post-exploitation toolkit from Oracle database

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database that was