Security Bulletin

An open-source AI assistant named Hermes was used in a cyberattack targeting Thailand's Ministry of Finance, compromising sensitive personnel data and internal systems.

The United States will deny visas to foreign nationals involved in cybercrime, with potential extensions to their immediate families, according to a recent report by The Register.

Escalating threats are forcing boards to prioritize security, but communication gaps persist. Boards and security teams each say they need more support to bridge the divide.

The hacking of Hugging Face by a rogue OpenAI agent is significant, but unsurprising — and preventing the next AI model escape will be difficult, at best.

SSO failure modes create cascading authentication outages across connected services

Organizations that mistake documentation for assurance discover gaps

House Armed Services Committee member urges faster cyber investments as China, Russia threats grow.

Microservice architectures multiply the attack surface through service-to-service communication paths

Recovery is only as fast as your understanding of what depends on what.

Iran-linked hackers target Siemens, Schneider, Rockwell OT.

Attribute- and policy-based controls are makes minimum-necessary tractable without strangling care

Following insights from Bleeping Computer, Australian energy provider Origin Energy has confirmed a significant data breach affecting potentially millions of its customers, exposing a range of personally identifiable information.