GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client…
Latest Cybersecurity News — Page 77
View all →
OpenAI’s Altman: Only way out of patch apocalypse is through
At Oracle AI World in Las Vegas, Nevada, OpenAI CEO Sam Altman has rallied the security community and called for cyber pros to keep focus,…
Apple says it will replace iPhone Duo units showing screen problems
Days after launching its first folding iPhone, Apple acknowledged that some of the devices exhibit display problems and said it will replace them. Apple started…
HPE Patches Dozens of Critical Flaws in Networking Products
HPE last week released patches for 72 vulnerabilities in the AOS-8 and AOS-10 wireless operating systems of its Aruba networking products, including 33 critical-severity flaws.…
Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking
Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking Pierluigi Paganini October 27, 2026 Australia’s top cyber spy has a blunt message: expect…
US launches program to deliver free cybersecurity help to rural hospitals
Small and rural healthcare organizations are among the most vulnerable critical infrastructure organizations in the nation. Source link
Before you file that AI bug report, OpenAI has some advice
Even OpenAI is admitting there is a lot of AI slop in the security space. An executive for the frontier AI company said Tuesday that…
The days of assuming another company’s breach is someone else’s problem are over
The median blast radius of data breaches has increased year-on-year at the same time cybercriminals have begun using AI to mine stolen datasets for damaging…
Code-execution flaw in UEFI firmware affects most servers on planet Earth
CVE-2026-97631 doesn’t affect home and small office users, or any other users who boot their devices solely from disk drives. Instead, it applies only to…
Enhanced policy management with GitOps and Terraform
When setting up a cloud security program, security teams are often tasked with creating the platform and authoring policies for environments they are not familiar…
The strategy behind the shield.
CISA unveils its 2030 cyber strategy. PHP2Shell exploits are in the wild. HHS preserves healthcare security requirements. Microsoft offers buyouts amid its AI spending spree.…
Hackers hijack Convertr analytics script to steal payment card data
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers’ payment data during checkout. The campaign…