PHP2Shell plus Fragnesia: A dangerous new route from web server to root
The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions […]
A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructure
In a deep dive into the Silent Train attack tactic used by China’s Volt Typhoon cybercrime […]
New Cisco firewall zero-day being actively exploited
A high-severity flaw in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security […]
Fake Anthropic AI previews lure in overeager employees
Everyone wants to know what Anthropic is up to, and hackers are gleefully exploiting the fact. […]
Anthropic and OpenAI diverge on who should pull the plug on risky AI
OpenAI and Anthropic agree that frontier AI systems need stronger oversight, but they are proposing sharply […]
Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secrets
Attackers are impersonating AI agents from companies including OpenAI, Anthropic, and Meta in a bid to […]
Vulnerability exploitation rising as the root cause of many breaches
More evidence has emerged that attackers are turning to vulnerabilities rather than phishing as a means […]
Securing MCP servers before the AI rollout outpaces security
Your company’s CTO has a plan to implement your company’s first LLM-based application. The board approved […]
PHP2Shell will persist in enterprise environments for years
Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application […]
Cloudflare AI Leak Crossed Customer Boundaries — and Access Controls Couldn’t Stop It
Cloudflare’s AI data leak exposed customer information across sessions, revealing a security gap in shared AI […]