Security Bulletin

Critical Oracle EBS flaw now exploited, prompting urgent patching guidance.

As AI reshapes cybersecurity workflows, John Paul Cunningham, CISO at SIlverfort, says the technology is creating opportunities rather than eliminating jobs — and there are more ways than ever to break into the essential field.

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social engineering and obsfucation, including blockchain abuse.

Parham Eftekhari discusses AI, quantum and the future of critical infrastructure trust.

This is the way: The old will protect the young until the young protects the old.

The disclosed exploits include a critical pre-authentication remote code execution vulnerability in libssh2 (CVE-2026-55200) and an authentication bypass vulnerability in self-hosted Gitea Docker deployments (CVE-2026-20896), which allows attackers...

Cyber threat intelligence provider WhoisXML API identified 212 newly registered domains referencing the Venezuela earthquake between June 24 and June 28, 2026.

Google threat hunters report that Russian influence campaigns are increasingly targeting the EU and NATO, aiming to divide Western coalitions and advance Moscow's political and military objectives.

The TaskWeaver loader delivers Djinn Stealer, which targets dev credentials and AI tokens.

The new username functionality enables users to set a unique handle and share that instead of their personal phone number when initiating conversations.

A security researcher, operating under the pseudonym "Srikanth L" and affiliated with CashlessConsumer, has alleged that the IDRBT's Domain Registration Portal, the exclusive registrar for India's .bank.in namespace, exposed over 33 unauthenticated...