Latest Cybersecurity News
View all →
A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructure
Its report described at least four confirmed and one likely zero-day vulnerabilities exploited by Volt Typhoon, which targeted network and endpoint management systems, SD-WAN orchestrators…
Bitdefender launches GravityZone Exposure Management to prioritize vulnerabilities, map attack paths, reduce attack surface risks
Cybersecurity company Bitdefender announced that GravityZone Exposure Management, an advanced solution, gives organizations a comprehensive view of threat risk exposure across their internal and external…
NIST outlines 10 design tenets to strengthen AI agent identity and access management, proposes safeguards
The National Institute of Standards and Technology (NIST) has outlined 10 design tenets for agent identity management systems, calling for distinct identities, tightly scoped permissions,…
Getting started with Open Policy Agent (OPA) to improve your cloud security
CSPM (Cloud Security Posture Management) tools have made it easier for businesses to reduce risks in the cloud. One key component of this has been…
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
Cisco Talos has identified UAT-11473, a highly sophisticated advanced persistent threat (APT) actor, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller…
php2shell: Why One Exploit Doesn’t Work Everywhere
php2shell raised fears of mass exploitation. A week of testing by our research team found that working exploits had to be fitted to each target’s…
The AI election.
This week, Dave and Ben look at how political campaigns are looking to utilize AI chatbots in their campaign messaging efforts alongside another story involving…
Binance probes potential $5.8 billion crypto-theft hack
Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack…
Hackers Actively Exploiting WordPress Remote Code Execution Flaw Just Hours After Patch Release
A WordPress remote code execution vulnerability came under attack just hours after version 7.1.4 was released on October 28, 2026, fixing 22 vulnerabilities, including an…