Cyberespionage has remained a constant feature of Russia’s war against Ukraine. ESET Research has long tracked Gamaredon, one of the most active Russia-aligned advanced persistent…
Blind spot If there’s a criticism that can be levelled at GitHub over this, it’s that it has taken so long to address a weakness…
Update March 23, 17:40 UTC: Wiz Research has identified a parallel compromise of kics-github-action On March 19, 2026, threat actors compromised Aqua Security’s Trivy vulnerability…
Microsoft 365 gaps rarely announce themselves. Risk builds quietly in the background. An admin account accumulates more access than it needs. A Conditional Access policy…
Anthropic appears to be testing Claude Cowork support on mobile, allowing you to manage long-running Claude tasks from your phone. For those unaware, Claude Cowork is Anthropic’s…
The clock has run out. As of June 24, 2026, the first of Microsoft’s original Secure Boot certificates, the Microsoft Corporation KEK CA 2011, has officially expired,…
On June 22, 2026, the National Security Agency (NSA) issued an urgent, coordinated warning alongside its international Five Eyes intelligence allies, comprising the cybersecurity authorities…
More than 100 vendors now position themselves as AI SOC platforms, but the category didn’t even exist 18 months ago. The Cloud Security Alliance…
Google has announced a significant enhancement to its AI platform with the release of Gemini 3.5 Flash, which now includes native support for agentic computer…
Enterprise security teams have spent years building defenses around the cloud. They secured workloads, locked down identities, and monitored runtime behavior with increasing sophistication. What…
Reco announced Reco Agent Security, which expands the Reco Platform with advanced capabilities that prevent data exposure, unintended use and process disruption caused by AI…
You receive an email warning that your website’s domain name is about to expire. Renew now, it says, or your website and email could stop…
