Welcome!

Unlock your personalized experience.
Sign Up

Cybersecurity

Friday Squid Blogging: Arctic Bobtail Squid Video

Nice video of the Arctic bobtail squid. As usual, you can also use this squid...

Metabase SQLi zero-day exploited in customer data-th...

A critical Metabase SQL injection vulnerability was exploited in zero-day att...

Unlimited Technology Systems breach impacts 3.8 mill...

Healthcare software company Unlimited Technology Systems reported that more t...

Nearly 800 Malicious npm Packages Deliver Cross-Plat...

A cluster of nearly 800 malicious packages has been published to the npm regi...

UNC6671 Vishing Attacks Target Personal Phones to St...

A recent wave of cyber attacks targeting financial services, private equity, ...

AI-Generated Patches Fail Half the Time

A study of more than 6,000 patches found that even working patches can introd...

Real emails, hijacked payments: Two H1 2026 attack c...

Gen's H1 2026 Threat Report examines two separate attack chains. One used com...

Levi Strauss & Co. says hackers stole corporate data...

Levi Strauss & Co. (Levi's) says that hackers used social engineering on thre...

North Carolina Ports confirms cyberattack disrupting...

The North Carolina Ports Authority has confirmed that a cyberattack disrupted...

New WordPress Pre-Auth XSS Could Lead to PHP Code Ex...

WordPress has fixed a pre-authentication reflected cross-site scripting (XSS)...

ICE Is Buying Access to Credit Card Records

Through data brokers, ICE is buying the information you provided to open a cr...

Growing Up The Hard Way

Open Source had a great childhood. For two decades it got to be a kid. It ran...

18-Year-Old Linux SCTP Flaw Could Let Local Users Ga...

A use-after-free bug in Linux's SCTP networking code can be turned into full ...

Claude Code and Gemini CLI Flaws Let a GitHub Issue ...

A GitHub issue opened by an account with no repository privileges was enough ...

New NatJack Attacks Hijack TCP Sessions and Spoof DN...

Security researcher Malcolm Stagg has disclosed a new attack class called Nat...

Malware Can Abuse Windows Hello for Business Keys fo...

Security researcher Malcolm Stagg has disclosed a new attack class called Nat...