Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All
Cory Solovewicz receives more unwanted emails than you. Seriously—it’s a lot more. Since December 2024, one of the domains at which the security researcher receives…
Latest Cybersecurity News — Page 33
View all →
18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Root and Escape Containers
SCTPhantom, tracked as CVE-2026-64564, is a high-severity Linux kernel use-after-free vulnerability in the Stream Control Transmission Protocol (SCTP) Dynamic Address Reconfiguration implementation. Researchers at Tencent…
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
Swati KhandelwalAug 08, 2026Email Security / Vulnerability New research shows content inside an email can escape its message boundary and interfere with the webmail interface.…
Critical Vulnerabilities Patched With Chrome 151 Update
Google on Thursday rolled out a fresh Chrome 151 update that patches 41 critical- and high-severity vulnerabilities. Over two dozen security defects are memory safety…
Palo Alto Networks Faces China Cybersecurity Review Amid Rising Tech Tensions
Palo Alto Networks Faces China Cybersecurity Review Amid Rising Tech Tensions Pierluigi Paganini August 08, 2026 China opened a cybersecurity review of Palo Alto Networks,…
Meta joins OpenAI, Anthropic in latest AI test breach
Meta has become the third frontier AI developer in recent weeks to disclose a security incident involving one of its advanced AI models during cyber…
5 Key Questions CISOs Should Ask Before Board Meetings
I recently hosted a webinar featuring cybersecurity experts, Emily Heath, General Partner of CyberStarts and Jeremy Smith, CISO of Avery Dennison shared invaluable insights on preparing…
Hackers breach TrueConf to trojanize client installers with backdoors
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors. The…
Malware Abuses Windows Hello for Business Key to Authenticate Microsoft Entra ID
A newly demonstrated technique shows how malware in a compromised Windows user session can abuse Windows Hello for Business (WHFB) cryptographic keys to authenticate to…
The Zero Trust Architecture For AI Agents On Google Cloud
Executive Summary AI Agents are rapidly expanding across enterprise environments, transitioning from simple conversational chatbots to autonomous systems capable of acting on behalf of users,…
Flock’s Plans for Rideshare Dashcams and Coaching Police, Revealed
404 Media also reported this week that a former Flock government affairs manager, Jonathan Paz, said he quit in July 2025 and turned down equity…
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Attacker-controlled instructions can make Atlassian’s Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server.…