News that matters, without the noise.

Hackers Exploiting Unpatched GeoServer Zero-Day

The security defect is described as an SQL injection that could allow attackers to achieve remote code execution.

Kansas banned phones at school, but the logistics of enforcement brought a massive price tag

The Endpoint-to-Cloud Privilege Security Checklist: 21 Controls to Eliminate Standing Access 

PAM secured the endpoint; privilege moved on. Work through these 21 controls to find out where standing access

10 Best Secure Web Gateway Vendors In 2026

A secure web gateway inspects outbound web traffic blocking malicious sites, enforcing acceptable-use policy, decrypting TLS, and stopping

Top 10 Best Microsegmentation Tools in 2026

Microsegmentation tools stop attackers from moving sideways. Once ransomware operators land on one machine, everything that follows credential

New DRAM Scrambling Attack Exposes CPU’s Most Protected Memory Zones

A new attack technique that manipulates a computer’s memory controller to bypass some of the strongest hardware security

Apple Urges Mercenary Spyware Targets to Enable Lockdown Mode Immediately

Apple has quietly rolled out a new wave of high-confidence “Apple Threat Notification” alerts, warning selected iPhone users

Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks

You’re not alone if you just received an “Apple Threat Notification” saying it detected a “mercenary spyware attack

DSA-6438-1 postgresql-17 – security update

https://security-tracker.debian.org/tracker/DSA-6438-1

Do You Have A Post-Quantum Cryptography Plan?

Flock says its new tool will help identify police abuse, but hasn’t explained how it works

The surveillance company announced it’s making a tool called “Audit Assistance” mandatory for all customers, claiming it’s already

USN-8631-3: Linux kernel (NVIDIA Tegra IGX) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not