News that matters, without the noise.

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine

The SOC we’ve always known was built around a model that guarantees most of the alert queue will

Average Cyber Insurance Losses Increase Despite Fewer Claims

Chubb reported that growing privacy litigation has contributed to surging cyber claim costs in the US

24 Malicious npm Packages Abuse Trusted Mirrors to Host ClickFix Phishing Pages

Twenty-four malicious npm packages have been used to turn trusted package mirrors into staging points for ClickFix phishing

CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks

The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.

USN-8681-1: OpenJDK 25 vulnerabilities

It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker

RHSA-2026:57914: Important: Red Hat build of MicroShift 4.18.54 security update

Red Hat build of MicroShift release 4.18.54 is now available with updates to packages and images that include

Hackers Abuse Legitimate RMM Tools in 46-Country Phishing Campaign to Gain Remote Access

A phishing operation is abusing legitimate remote monitoring and management tools to give attackers direct control over victim

SonicWall NetExtender Vulnerabilities Allow an Attacker to Write Arbitrary Files as Root

SonicWall has disclosed two security vulnerabilities in its NetExtender Linux client, including a critical path traversal flaw that

The MFA Identity Trap: When Authentication Creates a False Sense of Security

Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying

Hackers now exploit critical Gitea flaw in code injection attacks

Attackers are now exploiting a critical-severity vulnerability in the Gitea self-hosted Git service, according to the U.S. Cybersecurity

Who’s afraid of an open-weight model? GLM, context bombing and post-Black Hat attacks

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in Tests

Aikido Security has published research that recreates the Australian gym-booking incident in a synthetic environment, finding that Claude