Cybersecurity teams are shifting toward continuous control across identity, cloud, endpoints, telemetry, and human risk.

Warlock exploited SharePoint flaws in attacks on at least four organizations, including two critical infrastructure operators ...

MI5 says more than 100 U.K.-linked academics contributed to MSS-funded research via CGTRI, which it assesses as an MSS front.

China-nexus UAT-11587 targets Asian government and policy groups with Antino, a Rust backdoor that uses Microsoft 365 for C2.

Fortinet says attackers are exploiting a FortiMail flaw that lets unauthenticated users write arbitrary files via crafted HTTP requests.

Dell fixes six CSM flaws enabling authentication bypass, storage credential access, and cluster-wide privilege escalation.

OpenAI parted ways with three safety researchers after finding they mishandled sensitive information, reportedly tied to infrastructure architecture.

OpenAI disrupted a coordinated campaign attributed to Moonshot AI associates that sought to extract protected reasoning at ...

Bitget says attackers exploited a third-party zero-day to steal $387.5 million and move laterally into its wallet environment ...

Android 17 limits accessibility service access under Advanced Protection to verified Accessibility Tools, blocking a major malware abuse path.

AI-driven attacks, exposed secrets, old flaws, new exploit tricks, malware techniques, and security research worth knowing ...

Glow found over 13,000 internal images from 300+ organizations exposed in public GitHub repos during AI-assisted code reviews ...