News that matters, without the noise.

AI Agent Firewall Startup AIR Security Emerges From Stealth With $50 Million

The startup’s firewall evaluates AI skills, plugins and MCP servers for malicious instructions, excessive permissions and software supply

‘Breeze Comet’ Tears Into Brazilian & Global Financial Systems

Brazil’s most sophisticated threat group is making light work of the country’s financial systems, putting money directly into

Microsoft says KB5120998 Windows update resets desktop settings

Microsoft has confirmed that desktop settings are lost or reset on some Windows devices after installing the KB5120998

Skills vs MCP vs RAG vs Memory: What AI Agents Need to Know

You finally get the SOC interview. Then they ask this… #soc101 #cybersecurityforbeginners

Researching Employment Scams

Researchers built a fake company to study fake employee scams.

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy

Shai-Hulud’s Reach Just Grew to 469 Credential Locations. Here’s What That Means

In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for

USN-8717-1: Apache Tika vulnerability

It was discovered that Apache Tika’s ISA-Tab parser incorrectly handled file path resolution. An attacker who could place

RHSA-2026:63136: Important: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has

Critical VMware Workstation and Fusion Vulnerabilities Allow Attackers to Execute Code on the Host

Broadcom has issued a critical security advisory warning that two newly disclosed flaws in VMware Workstation and Fusion

New StreamRAT Android Trojan Gives Hackers Full Remote Control Through VNC and Accessibility

StreamRAT is a new Android banking trojan that gives criminals broad control of an infected phone. It pairs