The Maritime Transportation Security Act (MTSA) requires plans to protect OT systems, audits by independent third parties, ...

AI's danger isn't that it's creating new bugs, it's that it's amplifying old ones. On March 10, 2026, Microsoft patched ...

Industry and ad hoc coalitions appear poised to help fill the gap created by NIST's decision to cut back on CVE data ...

In embracing device code phishing, attackers trick victims into handing over account access by using a service's legitimate ...

A Cloud Security Alliance (CSA) paper warns of an "AI vulnerability storm" triggered by the introduction of Anthropic's ...

Stopping EDR killers, which employ bring-your-own-vulnerable-driver (BYOVD) attack techniques, is difficult, but not ...

Quantum computers are coming and they may impact systems in unexpected ways that security teams will need to plan for.

Attackers can abuse the near-maximum severity flaw in nginx-ui to restart, create, modify, and delete NGINX configuration ...

A March 2025 update from Dragon Boss established persistence via scheduled tasks and arranged for any future payloads to be ...

Google, Meta, Microsoft about half the time don't comply with requests to opt out of online tracking per California law ...

Regulatory differences, interconnected digital ecosystems, and the rise of AI have created a complex supply chain Asian ...

The China-backed threat group is targeting AWS, Google, Azure, and Alibaba cloud environments and using typosquatting to ...