AI agents capable of discovering and exploiting obscure vulnerabilities are emerging alongside developers producing vast ...

Robert "RSnake" Hansen, Katie Moussouris, Rich Mogull, Richard Stiennon, and Bruce Schneier consider whether columns they ...

Congress sent a letter to Instructure about the Canvas cyberattack, after it said it reached an "agreement" with the ...

Security governance needs to be more than an annual compliance exercise. New companies are emerging to address ...

In a role reversal, investment dollars in AI security startups exceeded the value of AI acquisitions in 1Q26 by more than $1 ...

A ransomware attack on Foxconn's North American facilities is one of 600 hits on manufacturers this year, as gangs ...

Threat actors are publishing RubyGems packages that include scrapers targeting public-facing UK government servers, but with ...

This is the second time this year a threat actor has leveraged a CVSS 10.0 vulnerability in Cisco's network control system.

Hundreds of npm packages infected by the self-propagating, credential-stealing worm from TeamPCP are related to the open ...

Security controls can do only so much. Here's where your employees are usually your first, and only, line of cyber defense.

A Taiwanese student experimenting with software-defined radio shut down three bullet trains for nearly an hour, leading to an ...

It's the first time in two years with no zero-days. But with 137 flaws to patch, including nine critical ones, admins still ...