How to pen test LLM, RAG and GenAI applications
Use Python to make the attack repeatable Manual probing is valuable for discovery, but it is a poor regression method. A small Python harness can…
Latest Cybersecurity News — Page 88
View all →Wiz and Tines: Operationalizing cloud security
As cloud and AI development continues to grow and change at an unprecedented pace, organizations must prioritize securing these environments at scale. Traditional approaches to…
Announcing the Elastic Bounty Program for Behavior Rule Protections
Introduction We’re excited to introduce a new chapter in our security bounty program on HackerOne that we soft launched in December 2024. Elastic is now…
Trezor: 347,000 users targeted in phishing attacks after Brevo breach
Trezor has revealed that phishing attacks against its customers earlier this week targeted 347,000 email addresses and affected 2,500 users who clicked an embedded malicious…
CISA Warns of Critical GitLab Vulnerability Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical GitLab flaw, tracked as CVE-2026-85706, to its Known Exploited Vulnerabilities catalog after confirming…
China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to…
Optus outage attributed to hardware failure at exchange
Key points A hardware failure at an Optus exchange in Victoria caused a voice outage lasting about one hour and 16 minutes on Friday. The…
Check Point Patches Critical VPN Vulnerabilities
Cybersecurity firm Check Point this week announced patches for two critical-severity vulnerabilities in its gateway and firewall products using VPN functionality. Tracked as CVE-2026-85102 and…
Revolut Exposed KYC Data After Fraudulent Government Email Passed Security Checks
Revolut Exposed KYC Data After Fraudulent Government Email Passed Security Checks Pierluigi Paganini September 12, 2026 Revolut handed over KYC documents, selfies, and Bitcoin transaction…
Google’s Early Access is creating a blind spot for malicious apps
“If the company supplies and owns the phone, then the organization owns the full operating system, but provisions an isolated Work Profile alongside a Personal…
Wiz acquires Gem Security to reinvent cloud threat detection
Wiz turned 4 last month, and what a journey it has been. 4 years ago, my fellow co-founders and I left Microsoft with a conviction…
Now available: the 2025 State of Detection Engineering at Elastic
We’ve been working hard at Elastic Security Labs! We’ve just published a brand new report: the 2025 State of Detection Engineering at Elastic. This report…