GitLab patches a max-severity regex flaw alongside five high-severity bugs
GitLab just fixed a max-severity vulnerability that could allow unauthenticated attackers to execute arbitrary code on […]
Over 1,500 npm packages exposed by Trusted Publishing validation flaw
A flaw in npm’s Trusted Publishing mechanism could allow attackers to hijack legitimate software packages by […]
GAO Finds Post-Quantum Security Gaps Across 24 Federal Agencies
GAO found gaps in post-quantum security preparation across 24 federal agencies. Learn what inventory, funding, and […]
What to Look for in a Cyber Deception Solution: 12 Capabilities That Matter
Key Takeaways Decoys should look and behave like the environment around them, not just appear convincing […]
These ARE the droids you’re looking for
There’s an old leadership fantasy that goes something like this: The CISO surveys a sprawling technology […]
Researchers bypass 6 AI agent frameworks with a simple ‘Repeat-After-Me’ prompt
Researchers have tricked six widely used AI agent frameworks into running tool calls written by an […]
The 7 biggest issues CISOs and security teams face today
Year after year CISOs see the volume, velocity, and sophistication of attacks increase. They also see […]
Hackers Obtained Trusted Google HTTPS Certificates Without Breaching Google
Hackers obtained trusted Google HTTPS certificates by hijacking domain registries, exposing weaknesses in enterprise DNS security […]
Lightwell project filters out 400 Java library vulnerabilities
Lightwell, the open-source security initiative set up by IBM and Red Hat, has identified more than […]
Risk-Based Vulnerability Prioritization with Fidelis Halo® CNAPP
Key Takeaways Vulnerability severity alone does not provide enough context to determine the actual risk to […]