Security Bulletin

Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.

A harmless-looking sentence can influence an agent's choices once it enters a model's context.

Ransomware gangs are exploiting a WatchGuard Firebox flaw that CISA flagged nine months ago.

The five layers of securing AI agent harnesses.

Cushman & Wakefield leaders share five practices for building an effective CIO-CISO partnership.

Here’s why defenders today have to take apart and analyze code the way a hacker would.

The disgruntled researcher continued their vendetta against Microsoft by publishing yet another zero-day exploit for Windows Defender.

The AI-assisted campaign enabled attackers to gain domain admin in as little as 5 minutes.

The vulnerability, tracked as CVE-2025-20701, affects firmware version 1.0.0.28 of the Skullcandy Dime 3 earbuds, which utilize the Airoha Bluetooth Audio SDK, the Carnegie Mellon University CERT Coordination Center (CERT/CC) warned.

Starting Friday, businesses operating in the EU will have just 24 hours to notify the government any time they discover serious product security incidents.

Researchers at Group-IB have identified that Gigabud is now being paired with Vwork, a modified version of the Shelter app, attributed to the GoldFactory threat group.

The unpatched Plex Media Server instances are running versions 1.43.2 and earlier.