News that matters, without the noise.

Three-Quarters of Firms Knowingly Ship Vulnerable Code

AI risks threaten to permeate supply chains through unvetted code and unaudited suppliers

Flipper Unveils New Flipper One Modular Linux Cyberdeck

Flipper Devices has unveiled Flipper One, a modular Linux cyberdeck aimed at becoming a fully open, mainline-first ARM

P2PInfect Botnet Compromises Kubernetes Clusters Through Exposed Redis Instances

A well-known botnet is now targeting cloud environments in a more calculated way than before. P2PInfect, a Rust-written

AI-generated reporting: Lessons learned from Cisco Talos Incident Response

Talos IR shares prompt engineering lessons for consistent, accurate AI-generated cybersecurity reports with a realistic case study.

Scammers are abusing an internal Microsoft account to send spam links

The loophole allows spammers and scammers to send emails from a legitimate Microsoft email address typically used for

Ocean Emerges From Stealth With $28M for Agentic Email Security Platform

The company has developed a platform that uses specialized AI agents to inspect every incoming message. The post

CAG vs Long Context: How AI Models Use and Remember Information

Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention

The company blocked over 1.1 billion accounts and $2.2 billion in potentially fraudulent transactions. The post Apple Rejected

Socket Raises $60 Million at $1 Billion Valuation

The company will invest in its firewall, certified patches, protection extensions, new products, and team expansion. The post

Flipper One project needs community help to build open Linux platform

Flipper Devices, the maker of the Flipper Zero pentesting tool, is asking the community to help build Flipper

When Identity is the Attack Path

Consider a cached access key on a single Windows machine. It got there the way most cached credentials

BadIIS Malware Turns Hijacks IIS Servers and Redirect Users to Illicit Sites

A dangerous piece of malware known as BadIIS has been actively targeting Internet Information Services (IIS) web servers,