Inside Vercel’s sleep-deprived race to contain React2Shell
Talha Tariq and his colleagues at Vercel, the company that maintains Next.js, endured many sleep-deprived nights and weekends when React2Shell was discovered and disclosed soon…
Category: Cyberscoop
CrowdStrike to buy identity startup SGNL for nearly $740M
CrowdStrike is buying identity management startup SGNL, a move that underscores how identity security has become a central battleground in enterprise cybersecurity as companies add…
Trump pulls US out of international cyber orgs
The Trump administration is withdrawing the United States from a handful of international organizations that work to strengthen cybersecurity. As part of a broader pullback…
‘Elon Musk is playing with fire:’ All the legal risks that apply to Grok’s deepfake disaster
As collective disgust has continued to build over the widespread generation and sharing of nonconsensual, sexualized deepfakes generated by X’s GrokAI tool, angry onlookers have…
Researchers rush to warn defenders of max-severity defect in n8n
Researchers warn that a critical vulnerability in n8n, an automation platform that allows organizations to integrate AI agents, workflows and hundreds of other enterprise services,…
Taiwan blames Chinese ‘cyber army’ for rise in millions of daily intrusion attempts
Taiwan endured a year-long intensified cyber offensive from China in 2025, that targeted the government and critical infrastructure — with an increasing focus on the…
Veeam issues patch to close critical remote code execution flaw
Veeam has released an update to fix a security flaw in its Backup & Replication software that could let certain users run code on affected…
Why cybersecurity cannot hire its way through the AI era
The cybersecurity industry has been battling a talent shortage and skills gap for years. Meanwhile, organizations need a new way to approach risk management proactively…
FCC finalizes new penalties for robocall violators
The Federal Communications Commission finalized new financial penalties for telecoms that submit false, inaccurate or late reporting to a federal robocalling system. The new regulations,…
Why governments need to treat fraud like cyberwarfare, not customer service
For too long, fraud – an illicit economy rivaling the GDP of G20 nations – has been seen as a cost of doing business, a…
AI, voting machine conspiracies fill information vacuum around Venezuela operation
The surprise raid by U.S. armed forces and law enforcement agencies in Caracas, Venezuela had observers around the world scouring social media and news for…
Convicted Bitfinex bitcoin launderer freed from prison, thanks Trump law
A hacker who pleaded guilty to conspiring to launder billions of dollars worth of bitcoin stolen in the 2016 Bitfinex hack has been released from…