News that matters, without the noise.

Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database

A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service’s Gremlin query sandbox

Open Source Software: Security Principles and Practices

Open source software (OSS) is embedded in nearly every modern system, from business applications to critical infrastructure. Our

USN-8625-1: OpenSSL vulnerability

It was discovered that OpenSSL incorrectly allocated memory buffers in the SSL/TLS state machine when receiving handshake data.

[Control Systems] Phoenix Contact security advisory (AV26-762)

<article data-history-node-id="8055" about="/en/alerts-advisories/control-systems-phoenix-contact-security-advisory-av26-762" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

WebPros security advisory (AV26-761)

<article data-history-node-id="8054" about="/en/alerts-advisories/webpros-security-advisory-av26-761" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppable

Cybersecurity experts told TechCrunch that one of the biggest lessons to be taken from the OpenAI hack against

New CosmosEscape Vulnerability Lets Attackers Take Over Azure Cosmos DB Instances

A critical vulnerability, dubbed CosmosEscape, in Microsoft Azure Cosmos DB could have let attackers seize control of virtually

New GenieLocker Ransomware Attacks Windows, ESXi, and Linux Instances

GenieLocker, a newly identified ransomware linked to the financially motivated Toy Ghouls group, targets Windows, Linux, and VMware

After the Break-In: What Attackers Do Once They’re Already Inside

Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors establish

Rediscover Maltego in 2026

Government AI Is Usually Slow. Alberta Says Not Here.

North Korea’s Lazarus Group sharing tools with ransomware hackers, South Korean agencies warn

Cyberattack tools and infrastructure used by North Korea’s Lazarus Group appear to have been shared with ransomware criminals