17 old software bugs that took way too long to squash
In 2021, a vulnerability was revealed in a system that lay at the foundation of modern […]
Metabase SQLi exploit grants attackers total access
Business intelligence (BI) platform provider Metabase has disclosed a zero-day SQL Injection vulnerability, warning that customers’ […]
Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability
A currently exploited zero-day elevation of privilege vulnerability that needs to be patched in a Windows […]
Zoom zero-click RCE flaws allow attackers to compromise meeting participants
Zoom has fixed four vulnerabilities across its applications, including two that could allow attackers who join […]
Cloud Incident Response: How to Detect, Contain, and Recover from Cloud Threats
Key Takeaways Cloud incident response requires identity-first detection, cloud-native visibility, and API-driven containment rather than traditional […]
Incident Response Playbook: How to Build Actionable Workflows Before an Attack Happens
Key Takeaways An effective incident response playbook defines clear decision points, ownership, and default actions so […]
GitHub already has an EDR. You just have to listen to it
Many of the recent supply-chain attacks could have been caught earlier if defenders looked closely at […]
OpenAI launches GPT-5.6-Cyber as AI narrows vulnerability response window
OpenAI has expanded its Daybreak cybersecurity program and introduced GPT-5.6-Cyber, a specialized model for approved security […]
Security leaders’ rogue AI confidence could actually be disastrous
A large majority of IT and security leaders are confident in their teams’ ability to detect […]
The future of AI security research isn’t autonomous, it’s human-amplified
Meet HTTP Terminator, a new AI system that has identified hundreds of websites vulnerable to HTTP […]