GitHub confirmed that attackers associated with TeamPCP gained unauthorized access to thousands of the company’s internal code repositories after compromising an employee’s device through a malicious VS…
Microsoft-owned web-based code hosting and collaboration platform GitHub has confirmed that it has been compromised, following reports that the TeamPCP hacking group had successfully attacked…
Cisco on Wednesday announced patches for a critical-severity vulnerability in Secure Workload that could allow attackers to access site resources with Site Admin privileges. The…
Attackers are bypassing MFA on SonicWall VPNs because something was wrong with previous fix Pierluigi Paganini May 21, 2026 Attackers bypassed MFA on patched SonicWall…
AI is changing the volume and accelerating the pace of vulnerability submissions. If you’ve been following our recent AI series, you already know that submission…
“We built these tools because we believe that AI safety has to become a continuous engineering discipline rather than a periodic checkpoint, and we think…
For months, scammers have been taking advantage of a loophole that allows them to send spammy emails from an internal Microsoft email address typically used…
Nothing says happy Friday afternoon quite like finding a Cobalt Strike implant in your network. Such was the case for our partners at Blue Tree…
A virtual private network service called ‘First VPN,’ used in ransomware and data theft attacks, has been taken offline in a joint international law enforcement…
Flipper Devices has unveiled Flipper One, a modular Linux cyberdeck aimed at becoming a fully open, mainline-first ARM platform for hackers, researchers, and makers The…
A growing tension sits at the heart of enterprise AI deployments: organisations want agents to act autonomously, yet handing over passwords and API keys to…
A so-called software supply chain attack, in which hackers corrupt a legitimate piece of software to hide their own malicious code, was once a relatively…
