⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A maximum-severity SQL zero-day vulnerability in Metabase allows remote administrator access to the business-analytics platform. The flaw, which still lacks a CVE, could have a wide blast radius affecting downstream users.
AWS announced the renewal of its Police-Assured Secure Facilities (PASF) accreditation for the Europe (London) Region, allowing UK law enforcement to run applications securely. The accreditation involves a control set of security requirements, on-site inspections, and audit interviews.
The Gunra ransomware gang is breaching critical infrastructure organizations by exploiting vulnerabilities in popular firewall brands. The FBI and South Korea's government issued a warning about these attacks.
OpenAI released ChatGPT 5.6 Cyber, a model designed for vulnerability research, penetration testing, incident response, and remediation. Access is restricted to approved users only.
The article argues that defenders should move away from CVSS-based patching and instead adopt choke-point patching. This approach focuses on breaking attack chains to critical assets rather than following a checklist.
A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. This development highlights the evolving tactics of cybercriminal groups.