1,167 articles
KubernetesA major international container logistics carrier files SEC Form 8-K Item 1.05 after threat actors exfiltrate intermodal shipping manifests and customs manifests.
Threat IntelA high-severity deserialization vulnerability in vLLM's distributed PagedAttention KV-cache transfer protocol allows attackers to compromise GPU worker nodes.
Data BreachCloudflare Security releases an advisory addressing a vulnerability in Workers KV edge namespace routing allowing potential cross-tenant cache token retrieval.
Cyber AttackSEC Form 8-K filing reveals an advanced persistent threat breached the corporate IT network of a major commercial airline, accessing flight dispatch and crew scheduling platforms.
Threat IntelHugging Face security bulletins document a memory corruption vulnerability in transformers parameter offloading modules enabling arbitrary host execution.
Deep DiveThe PCI Security Standards Council enforces mandatory Requirement 6.4.3 and 11.6.1 compliance, requiring automated inventory and cryptographic hashing of all payment scripts.
MicrosoftMicrosoft MSRC publishes a security bulletin detailing an identity impersonation flaw in Azure Container Apps Dapr sidecars allowing cross-service token spoofing.
RansomwareSEC Form 8-K filing reveals an extortion syndicate encrypted corporate cloud servers hosting diagnostic telemetry and proprietary firmware repositories for hospital medical devices.
Agentic AIPyTorch Foundation and OpenAI issue security advisories for speech inference pipelines addressing a critical deserialization flaw enabling arbitrary command execution.
Deep DiveEuropean Supervisory Authorities finalize binding technical standards under the Digital Operational Resilience Act (DORA), requiring 4-hour intermediate incident disclosures.
GoogleGoogle Cloud Security discloses a vulnerability in Cloud Armor WAF Adaptive Protection allowing attackers to bypass rate limiting via multiplexed HTTP/2 frames.
Cyber AttackSEC Form 8-K filing reveals an advanced persistent threat exfiltrated sensitive aerospace engineering CAD designs and satellite propulsion telemetry.
Agentic AIA critical vulnerability in LiteLLM AI Proxy allows unauthenticated actors to forge JWT tokens and hijack enterprise foundational model pipelines.
AWS CloudAWS Security Bulletins disclose a privilege escalation vulnerability in the Amazon EKS Pod Identity Agent allowing compromised pods to replay IAM credentials.
OT / SCADASEC 8-K filing reveals an advanced extortion group infiltrated the corporate network of a major energy pipeline operator, accessing historical SCADA telemetry archives.
Threat IntelNVIDIA issues a high-severity security bulletin for Triton Inference Server addressing a shared memory buffer overflow that permits arbitrary GPU memory corruption.
Deep DiveThe Ministry of Electronics and Information Technology (MeitY) has finalized DPDP Rules 2026, establishing strict audit deadlines and algorithmic assessments for Significant Data Fiduciaries.
LinuxOracle Security alerts document a local privilege escalation flaw in the OCI Compute Instance Agent service allowing standard guest tenants to gain unconstrained host execution.
Cyber AttackMaterial SEC 8-K disclosure reveals advanced nation-state threat actors pivoted through a third-party equipment vendor SSL VPN to exfiltrate proprietary lithography recipes.
Threat IntelA critical vulnerability in the Langflow AI visual agent framework allows remote unauthenticated attackers to escape execution sandboxes and execute arbitrary Python code.
OT / SCADASiemens ProductCERT discloses a critical authentication bypass vulnerability in SIMATIC WinCC Open Architecture SCADA web interfaces affecting critical infrastructure.
Deep DiveThe European Union Cyber Resilience Act enters critical enforcement phases, requiring hardware OEMs and software vendors to maintain machine-readable SBOMs and report actively exploited flaws within 24 hours.
Threat IntelHashiCorp releases critical security bulletin for CVE-2026-50123 in Vault Enterprise, resolving a memory leak flaw in the Transit secrets engine exposing cryptographic keys.
Data BreachGlobal pharmaceutical enterprise files SEC Form 8-K disclosing a material cyber incident involving unauthorized exfiltration of proprietary Phase 3 clinical trial datasets.