“With software packages, we have lockfiles, pinned hashes, and reproducible builds. With IDE [integrated development environment] extensions, we have almost nothing. There is no integrity…
Recently I wrote about the dichotomy between the reports and experts annually citing a big increase in the cyber threat to OT systems and the…
Since our inception, Huntress has had a guiding principle to protect the 99%. This ethos has led us to create products, features, and functionality that…
Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by exploiting a critical vulnerability tracked as CVE-2026-42208. The flaw is…
A critical remote code execution (RCE) vulnerability tracked as CVE-2026-3854 in GitHub’s internal git infrastructure that could have allowed any authenticated user to compromise backend…
Application security provider Checkmarx has officially confirmed a new security incident involving the exposure of its internal GitHub repository. On April 27, 2026, Udi-Yehuda Tamar,…
Researchers from Forcepoint’s X-Labs team recently found a phishing campaign designed to steal login credentials from users. In this campaign, what grabbed researchers’ attention was…
AI agents are beginning to shop, log in, and complete tasks with little direct input. That shift is pushing the security industry to rethink how…
A cybercrime group of Brazilian origin has resurfaced after more than three years to orchestrate a campaign that targets Minecraft players with a new stealer…
The Court of Appeal has rejected the Post Office’s request for an extension to the time in which it must respond to an appeal against…
Microsoft-owned open source code hosting platform GitHub has acknowledged and patched a critical vulnerability that allowed arbitrary remote code execution, following a report from Wiz…
Video hosting platform Vimeo has confirmed that hackers have stolen user and customer data following an attack involving a third-party vendor. According to Vimeo, hackers…
