1,437 articles
MicrosoftA critical flaw in Deno on Windows allows attackers to inject OS commands via improperly escaped shell arguments in node:child_process APIs.
RansomwareRhysida ransomware group exfiltrates 2.44 Terabytes of clinical patient files and medical records from General Santos Doctors Hospital in an 8-Bitcoin extortion scheme.
VulnerabilityA technical engineering roadmap for complying with EU AI Act General-Purpose AI (GPAI) model mandates, systemic risk audits, and Article 50 synthetic content watermarking.
Threat IntelA high-severity flaw in vLLM EngineCore guided decoding allows crafted JSON Schema requests to trigger non-recoverable state crashes across multi-tenant GPU workers.
Threat IntelOneMain Financial files multi-state breach notices after an unauthorized network intrusion accessed personal loan records, SSNs, and borrower banking information.
KubernetesA critical flaw in Model Context Protocol (MCP) Kubernetes bridge servers allows attackers to inject malicious flags into kubectl tool calls, exposing cluster service tokens.
Data BreachQilin ransomware syndicate exfiltrates MedImpact pharmacy benefit databases, exposing prescription records, provider details, and SSNs across employer health plans.
Palo AltoPalo Alto Networks resolves a critical buffer overflow in PAN-OS XML parsing (CVE-2026-0310) allowing unauthenticated attackers to execute root code.
Deep DiveNew research reveals side-channel and prompt-leakage vectors capable of intercepting hidden chain-of-thought reasoning tokens in frontier reasoning models.
Data BreachUpbound Group disclosures reveal cloud storage exfiltration led to $13 million in fraudulent lease-to-own contracts generated via the Acima platform.
Threat IntelA sophisticated typosquatted Python package targets AI engineering pipelines, masquerading as vLLM inference worker daemons to exfiltrate proprietary model weights.
Threat IntelCISA advisory ICSA-26-272-01 reveals unencrypted update conduits and hardcoded private signing keys in Lantronix G520 gateways, enabling root RCE.
Threat IntelRegulatory filings reveal MoneyGram's global service outage was caused by a social engineering attack on IT helpdesks, resulting in massive consumer data theft.
Deep DiveAn architectural analysis of the Lethal Trifecta in autonomous enterprise AI agents: untrusted input, autonomous execution, and access to privileged external tools.
Data BreachThe U.S. Department of Defense confirms a nine-month breach of an unencrypted DMDC server, exposing 3.05 million active military, retiree, and dependent records.
Threat IntelCISA advisory ICSA-26-272-02 exposes critical flaws in Toptech TMS7 and TopHAT, enabling remote unauthenticated attackers to hijack oil and gas loading racks.
Deep DiveResearchers demonstrate Morris II style self-replicating adversarial prompt worms propagating autonomously across connected LLM agents and multi-agent workflows.
Threat IntelA critical template injection flaw in Next.js next/og (CVE-2026-94545) allows unauthenticated remote attackers to execute arbitrary code via Satori SVG parsing.
AppleApple resolves a critical out-of-bounds write zero-day in CoreGraphics (CVE-2026-86950) exploited in targeted cyber-espionage attacks against iOS and macOS.
CiscoA critical URL hex-encoding vulnerability in Cisco Catalyst SD-WAN Manager allows unauthenticated remote attackers to bypass authentication and hijack fabrics.
OT / SCADAOriginal OT research examining deterministic Industrial Ethernet fieldbus vulnerabilities under IEC 62443, demonstrating microsecond packet injection risks.
AWS CloudAn architectural research study comparing AWS Firecracker and Google gVisor, analyzing hypervisor boundaries, KVM virtio mechanics, and container breakout vectors.
Deep DiveDeep-dive security research demonstrating how indirect prompt injection exploits Model Context Protocol (MCP) to trigger cascading failures across multi-agent swarms.
RansomwareAn empirical data study analyzing corporate SEC Form 8-K cyber disclosures, examining the Item 8.01 materiality gap and threat actor regulatory weaponization.