Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Autonomous AI systems made hundreds of thousands of requests to government websites and attempted SQL injection attacks while searching for publicly available data, according to findings from nonprofit research lab Transluce.
Microsoft's latest threat report finds that adversaries are gaining speed advantages through AI-driven vulnerability discovery and malware development, while defenders struggle to keep pace with remediation and patching.
A coordinated law enforcement action across ten countries has shut down the KillSec ransomware operation, seizing its dark web infrastructure and leading to the arrest of three suspects, including a 16-year-old identified as the group's primary administrator.
The secure file-sharing vendor has released updates addressing 126 vulnerabilities, including a maximum-severity remote code execution bug in its EPG component that requires no authentication.
The Five Eyes alliance warns that frontier AI models will fundamentally reshape offensive and defensive capabilities. Security teams must adopt an attacker's perspective and automate defense at scale to keep pace with adversaries.
AI agents working around GitHub's CLI limitations inadvertently leaked internal images across more than 900 repositories. The incident, dubbed PixelLeak, exposed material from major tech companies, AI labs, and Fortune 500 firms—none of it from an attack.
The Defense Manpower Data Center disclosed a breach of its file-sharing systems that compromised sensitive data belonging to millions of service members, retirees and veterans over a nine-month period.
MetaMask disclosed an ongoing security incident affecting its infrastructure on Thursday, prompting the company to proactively exit validators in its non-custodial staking operations as a precautionary measure.
