A Suspected China-Nexus Group Used a BeyondTrust Remote Support Zero-Day in August, and Patching Will Not Undo a Compromise
BeyondTrust says a suspected China-nexus group exploited...
Browse Category
News
News from AI, cybersecurity, cloud infrastructure, and software ecosystems, with concise reporting on the developments builders and operators should track.
278 Articles
Targeted Ads Delivered Candiru Spyware to Al Jazeera, Citizen Lab Says, but Neither Report Describes the Exploit
Citizen Lab says ads bought by Discover-Tech, a vendor Google...
curl Fixes a Record 24 Vulnerabilities in One Release, Including a High-Severity Bug Reported by Anthropic
curl 8.23.0 fixed 24 vulnerabilities at once on October 14, a...
Microsoft Fixes a Record 1,413 Vulnerabilities in October, and Only One Is Known to Be Under Attack
Microsoft’s October 2026 Patch Tuesday fixed a record 1,413...
Ivanti Says It Fixed Part of a Connect Secure Flaw in July and Was Still Backporting When Attackers Struck
Volexity says attackers chained three Ivanti Connect Secure...
Attackers Forced Defrost at Hundreds of French Supermarkets Through Danfoss Controllers, and Danfoss Says Most Were End-of-Life
Attackers forced defrost on refrigeration controllers at...
Wordfence’s AI Finds a Ghostscript Flaw Rated 9.8 in the CVE and Moderate by Red Hat
Wordfence disclosed a Ghostscript heap overflow that Artifex...
Attackers Probed a CVSS 10 SonicWall SMA1000 Flaw Two Days After Its Patch, the Third Such Fix in 12 Weeks
Defused and Previdian saw attempts to exploit SonicWall SMA1000...
Booz Allen Says Frontier AI Met All Eight Attack Goals in Its OT Lab, With a Human Approving Every Exploit
Booz Allen says frontier AI models met all eight objectives in...
Exposed Claude Code Logs Tie an AI Pentest Agent to Data Leaks at Korean Financial Firms, CrowdStrike Says
CrowdStrike says an operator paired the open-source ARTEX agent...