The OpenAI agent incident highlights a new and uncomfortable security reality: AI agents are no longer just generating text. They can act, search, chain steps, use credentials, exploit systems, and create real-world security incidents.The reported incident involved an AI a…
The compromise of two Joyfill npm packages highlights how software supply-chain attacks continue to target the trust developers place in package registries.The affected …
The Soniva Dental Care data breach highlights the serious privacy and fraud risks created when healthcare and dental practices are hit by ransomware.Soniva Dental Care r…
The cyberattack targeting more than 30 Minnesota community water systems highlights why cybersecurity in public utilities must be treated as public-safety infrastructure…
The critical vBulletin pre-authentication remote code execution flaw highlights why public-facing forum software must be treated as a high-…
The CubePilot DNS hijacking incident highlights a serious supply-chain and infrastructure-security risk: when attackers control DNS, they c…
The exposure of more than 24,000 server BMCs leaking password hashes highlights a serious and long-running weakness in how critical server-…
The critical OpenWrt DHCPv6 flaw highlights a serious risk in router and embedded-device security: local network input can become an admini…
The critical TeamCity vulnerability highlights why CI/CD platforms must be treated as highly sensitive infrastructure, not just developer t…
The Thailand Securities Depository Investor Portal breach highlights a serious risk in financial-market infrastructure: even when securitie…
The Origin Energy data breach highlights the serious privacy and fraud risk created when customer information from essential-service provid…
The Bank of Baroda data breach highlights a serious risk in banking security: even when core banking systems are not directly compromised, …
CISA adding Fortinet FortiOS and Arista VeloCloud Orchestrator vulnerabilities to the Known Exploited Vulnerabilities catalog is a clear wa…
The Dysphoria IoT botnet shows how quickly botnet operators adapt when their infrastructure is disrupted.Dysphoria is reported as an IoT bo…
The public Certighost proof-of-concept exploit highlights a serious risk in one of the most sensitive parts of Microsoft enterprise environ…