⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article explains three ways browser attacks can evade endpoint telemetry, including session theft and extension abuse. It recommends browser-level controls to address this blind spot in EDR coverage.
This article argues that vulnerability backlogs are fundamentally an ownership problem, not a scanning problem. Organizations must establish clear asset ownership and remediation authority to effectively reduce risk.
Three new Linux backdoors disguise themselves as legitimate Asian mail security products, allowing them to evade detection. The article warns that such impersonation tactics make it hard to identify malicious software.
Dell has patched two maximum severity vulnerabilities in its Container Storage Modules that connect enterprise storage arrays to Kubernetes environments. The flaws require immediate attention from administrators to prevent potential exploitation.
OpenAI has parted ways with three safety researchers who leaked sensitive information about the company's infrastructure architecture to a third-party AI-safety organization. The researchers had previously expressed concerns about the pace of AI development, and their departure highlights ongoing tensions between safety practices and release schedules at frontier AI labs.
This article discusses why CISOs struggle to answer the board's three hardest questions about security posture, financial exposure, and trend improvement. It explains that traditional activity-based metrics fail to convey risk, and introduces a new guide that advocates for exposure-based reporting that connects data across tools to provide meaningful answers.