⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Over the past year, Russian cybersecurity firm Kaspersky said it investigated several incidents involving the group at Russian businesses.
Fast-growing companies face countless recommendations for securing Google Workspace, but not every control provides the same value. This webinar examines real-world breaches to explore which security controls matter most, which may be overrated, and where lean security teams should focus their resources.
Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. The vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0 and involves missing authentication for critical functions allowing an unauthorized attacker to elevate privileges over a network.
Microsoft has resolved a known issue that causes incorrect alerts warning that Defender Antivirus was turned off after installing recent updates.
In July 2025, someone registered a domain that used to belong to a content delivery network that had been wound down years earlier, and the domain was allowed to expire. Thousands of websites, code repositories, and documentation pages still carry hard-coded references to hostnames beneath the domain.
A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin an agent installs for a malicious one, even when the agent locked that plugin to a specific reviewed version. Security firm Air Security found that the agents fetch a snapshot by commit hash but never check that the code they end up with actually matches it.