New vulnerabilities are being discovered too fast, the time-to-exploitation is too short, and our visibility into them is ...

Microsoft has announced mitigations for CVE-2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.

Threat Detection & Incident Response Summit explores tools, strategies, and frameworks needed to build a resilient ...

Anthropic has silently patched a vulnerability that would have allowed an attacker to bypass the Claude Code network sandbox.

GitHub has confirmed that roughly 3,800 internal repositories were hacked after an employee installed an infected VS Code ...

A fresh Mini Shai-Hulud supply chain attack has hit over 320 NPM packages, along with GitHub Actions and a VS Code extension.

How security organizations can manage the rapid progression of AI applications moving from the experimentation phase into ...

Drupal is warning users that it’s preparing a patch for a ‘highly critical’ vulnerability that may be exploited shortly after ...

Verizon’s 2026 DBIR shows vulnerability exploitation was the top breach vector in 2025 as AI accelerated attacks, ransomware ...

The B1ack’s Stash dark web carding marketplace has released 4.6 million stolen credit card records as a free download.

Several major healthcare data breaches, affecting millions of individuals, have been added to the tracker maintained by the ...

Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...