News that matters, without the noise.

Google Details Turla’s New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks

The Russian state-sponsored threat actor known as Turla has been attributed to a previously undocumented .NET backdoor called

CMC Releases Analysis and Guidance for Education Sector After Canvas Data Breach

The UK Cyber Monitoring Centre reviews the Canvas breach affecting 160 UK universities, highlighting data theft risks and

New Enterprise-Ready MCP Specification Brings New Security Challenges

A major overhaul of the Model Context Protocol shifts critical security responsibilities from the protocol itself to developers

Meet Rove: the four-legged robot that’s changing industrial welding.

Synology-SA-26:11 Synology MailPlus Server

Synology has released a security update for the Synology MailPlus Server package in DSM to address multiple vulnerabilities

Philip Martin Joins Uber as Chief Information Security Officer

Martin brings experience from Coinbase, Palantir, Amazon, and the U.S. Army to lead Uber’s cybersecurity and enterprise security

OpenAI Reportedly Delays ChatGPT 5.6 Release Following Trump Administration Request

OpenAI has agreed to stagger the public release of its latest AI model, GPT-5.6, after the Trump administration

DSA-6369-1 pdns-recursor – security update

https://security-tracker.debian.org/tracker/DSA-6369-1

DSA-6368-1 pdns – security update

https://security-tracker.debian.org/tracker/DSA-6368-1

DSA-6367-1 dnsdist – security update

https://security-tracker.debian.org/tracker/DSA-6367-1

CVE-2026-55964

Medium Severity Description Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA. Intermediate CA certificates are required

CVE-2026-55960

High Severity Description Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain