Security Bulletin

A study by researchers from Purdue University, the U.S. Military Academy at West Point, and Florida International University examined over 220 apps, finding that nearly two-thirds contained third-party software development kits (SDKs).

The Kratos kit enabled cybercriminals with limited technical skills to harvest credentials, including passwords and session cookies, by providing convincing Microsoft-themed phishing pages.

The latest large language models have high false-positive rates and fail to take into account the context of scans, leading to more work for AppSec professionals.

Qilin exploited a patched Palo Alto VPN flaw, highlighting the cost of delayed patching.

A Russian-speaking actor, "Trim," dismantled publicly available frontier models and integrated them with offensive security tools.

Learn to build AI agent skills in the CLI—no coding required. Teach your AI your workflow once, connect your tools via MCP, and let it handle the busywork while you stay in control.

From professional services to nonprofit wellness to fashion retail, get a glimpse of how Cisco customers are discovering new ways to connect securely, simplify operations, and scale with confidence.

AI agents need robust networks. Learn how to modernize your campus and branch Wi-Fi to move beyond reactive tickets and unlock AI-driven business growth.

The attacker manipulated illegitimate price reports to disguise them as valid ones, then rapidly opened and closed large positions to generate artificial profits.

The breach at Estée Lauder, a New York-based cosmetics firm with $14.3 billion in annual revenue, resulted from the exploitation of a vulnerability in Oracle E-Business Suite, specifically impacting versions 12.2.3 through 12.2.14.

Cruciferra, first offered for sale in autumn 2025, underpins dozens of campaigns delivering malware such as AsyncRAT, Agent Tesla, and Remcos.