News that matters, without the noise.

Multiple PHP Vulnerabilities Enable DoS and Memory Corruption Attacks

Multiple security vulnerabilities in PHP have been disclosed that could allow attackers to trigger denial-of-service (DoS) conditions and

Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability

Organizations are urged to patch after proof-of-concept code makes the Linux root escalation flaw easier to exploit. The

Chester Wisniewski: Director and Global Field CISO

How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions

Building a shortlist for an AI SOC evaluation can be tough. SIEM, SOAR, and pureplay AI SOC vendors

Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

A suspected China-nexus threat activity cluster has been observed targeting Indian taxpayers, tax professionals, and corporate finance teams

It Might Feel Like We’ve Been Here Before, But We Haven’t

As artificial intelligence (AI) adoption surges and organisations move from the ‘should we?’ phase to the ‘how do

Cisco Catalyst Center Arbitrary File Read Vulnerability

A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a

Moody Bible Institute Data Breach Exposes 2.3 Million Users’ Personal Data

Moody Bible Institute has confirmed a significant data breach after threat actors linked to the ShinyHunters extortion group

Multiple ModSecurity Vulnerabilities Allow Attackers to Bypass Firewall Rules

Multiple vulnerabilities have been disclosed in OWASP ModSecurity, a widely used open-source web application firewall (WAF), allowing attackers

RedLine C2 Pivot Reveals Seven Fraudulent Domains Used in Maritime Phishing Attacks

A single leaked command and control server ended up unraveling an entire phishing operation aimed at the maritime

Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments

Researchers uncovered two campaigns embedding indirect prompt injections in malicious websites to exploit autonomous AI agents browsing the

What Is AI Code Refactoring? Agentic AI & Safe Code Changes