Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
A maximum-severity vulnerability in GitLab's regular expression compiler could allow unauthenticated attackers to execute arbitrary code through malicious pipeline configurations.
Microsoft is urging customers to migrate away from Windows 11 23H2 Enterprise, Education, and IoT Enterprise before security updates end next month. The company is rolling out Windows 11 26H2 as the replacement.
A malware infection discovered at Nippon Columbia Group, a contractor handling customer data for Japan's largest karaoke chain operator, has exposed records for over 8.6 million customers and 93,000 employees.
Anthropic's OSS Scanner harnesses Claude to identify vulnerabilities in open source at scale, but the bottleneck has shifted from detection to remediation, with maintainers struggling to keep pace.
Edward Dubrovsky, a 54-year-old Canadian cybersecurity executive who worked at firms negotiating ransomware payments, has been arrested in Pennsylvania on extortion and conspiracy charges linked to the ShinyHunters hacking group.
A Chinese-speaking threat actor deployed an AI-powered penetration testing toolkit and large language model agents to breach major South Korean financial institutions, exposing customer data and triggering system failures across the sector.
AI SPERA's threat intelligence platform is moving beyond traditional asset discovery toward AI-driven exposure management that connects findings with context, prioritization, and automated response workflows.
Federal agents arrested the co-founder of a Canadian firm specializing in ransomware negotiations, linking him to the ShinyHunters group that breached the FBI's own systems and stole sensitive data on thousands of agents.
