Hackers abuse the Ivanti Connect Secure bug to gain access without accounts
Attackers without an account of their own were found logging in to Ivanti Connect Secure appliances […]
Unplug your smart fridges, French supermarkets warned after cyberattack
More internet-connected refrigerators have joined the official list of those affected by a cyberattack that ruined […]
Cybersecurity is a leadership problem: Why the management model needs to catch up
When I started writing regularly about cybersecurity management in 2015, the environment looked very different. Cloud […]
AI agents aren’t ‘going rogue.’ Frontier labs are skipping security basics.
Since July, US frontier AI labs and other AI leaders have revealed a string of incidents […]
OpenAI’s AI misalignment problem is growing
OpenAI’s misalignment problems seem to only be getting worse, based on yet another trio of reports […]
IonQ’s $1.2 billion acquisition of Elisity is trying to position it for quantum cybersecurity
When quantum vendor IonQ on Sunday announced a $1.2 billion all stock deal to take over […]
October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days
Microsoft released a record-shattering 1,407 CVEs to be plugged today on October Patch Tuesday, breaking the […]
GitLab patches a max-severity regex flaw alongside five high-severity bugs
GitLab just fixed a max-severity vulnerability that could allow unauthenticated attackers to execute arbitrary code on […]
Over 1,500 npm packages exposed by Trusted Publishing validation flaw
A flaw in npm’s Trusted Publishing mechanism could allow attackers to hijack legitimate software packages by […]
GAO Finds Post-Quantum Security Gaps Across 24 Federal Agencies
GAO found gaps in post-quantum security preparation across 24 federal agencies. Learn what inventory, funding, and […]