News that matters, without the noise.

Critical PHP PDO Driver Bugs Expose Firebird SQL Injection and PostgreSQL DoS Risks

A newly disclosed pair of flaws in PHP’s database driver layer shows that even mature code can hide

CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws

The audits are reportedly being spearheaded by CISA’s Attack Surface Evaluation team, a specialized unit tasked with conducting

Footage of a humanoid robot attacking Indonesian office workers has sparked widespread alarm…

UK cyber pledge draws only a handful of top firms despite ministerial appeal

Those that did sign include large firms such as Aviva, the London Stock Exchange Group and Marks &

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial

Hacktivists call out Trump by hacking and defacing US Army websites

The U.S. Army has fixed two of its websites that were hacked to display messages calling President Trump

Microsoft Confirms Windows 11, 26H2 Comes With Change in Backup Policy

Microsoft has confirmed a significant change to its Windows settings backup policy with the upcoming release of Windows

Hackers Use Recruiter Phishing Emails and Fake Career Pages to Harvest Gmail Logins

A new phishing campaign is targeting job seekers by posing as recruiters from recognizable brands. The scheme uses

Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks

Researchers say the Iran-linked threat actor used an adaptable modular malware framework and compromised IT service providers to

Webinar tomorrow: Why modern email attacks require a new approach to defense

Tomorrow’s webinar explores how behavioral AI can help organizations detect sophisticated phishing, business email compromise, and account takeover

What Changes When Your Software Supply Chain Includes AI Writing Your Code?

Software supply chain security was hard enough. Then AI joined the build pipeline. For five years, “software supply