The n8n token-exchange vulnerability highlights a subtle but serious identity-security risk in enterprise workflow automation platforms.n8n is commonly used to connect applications, APIs, cloud services, databases, SaaS platforms, AI agents, and internal business workflows…
The new 23andMe settlement highlights how sensitive genetic data breaches can remain a major risk long after the original incident.The 2023 breach exposed information li…
OpenAI’s GPT-Red research highlights an important shift in AI security: prompt-injection and jailbreak testing can no longer depend only on manual red-teaming.As AI syst…
A critical account takeover vulnerability affecting widely deployed collaboration software deserves immediate attention, particularly because exploitation may require no…
This incident highlights why operating system updates must be tested against device-specific drivers and firmware before broad deployment. …
The phishing campaign targeting LastPass and Bitwarden users shows how attackers are exploiting fear around password-manager breaches to st…
SAP’s patch for the critical NetWeaver AS ABAP vulnerability highlights why enterprise ERP platforms must be treated as crown-jewel systems…
The campaign using nearly 300 fake GitHub repositories shows how attackers are abusing trust in open-source platforms to distribute malware…
SonicWall’s warning about SMA1000 vulnerabilities being exploited as zero-days shows once again why remote-access appliances must be treate…
Microsoft’s mapping of year-long ShinyHunters-linked Salesforce attacks shows how SaaS compromise is increasingly about abusing trusted acc…
The CrashStealer macOS malware shows how attackers are abusing trusted-looking system prompts to steal sensitive data from Mac users.CrashS…
The Jscrambler npm package compromise highlights how dangerous a single malicious software release can be in the development supply chain.A…
The cyberattack on Japan’s largest taxi operator highlights how digital disruption can quickly affect real-world transport operations.Nihon…
The Lidl online shop breach highlights how third-party service providers can become the weak link in customer-data protection.Lidl disclose…
The actively exploited iCagenda and Balbooa Forms vulnerabilities show how dangerous CMS extension flaws can become when they allow unauthe…