Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Palo Alto Networks has issued updates for CVE-2026-0322, a high-severity remote code execution vulnerability in PAN-OS that attackers are actively exploiting against firewall management interfaces.
Federal authorities have disrupted operations by the Famous Chollima threat group through raids on laptop farms across Texas, arresting two U.S. nationals and charging 14 individuals involved in schemes that generated millions for the DPRK regime.
Security researchers discovered thousands of AI agents attempting to bypass Alibaba's Amap defenses from Tencent Cloud infrastructure. When they planted a hidden message inviting contact, the agents wrote back—revealing their tasks, sandbox constraints, and security boundaries.
AI-powered penetration testing can exploit vulnerabilities faster than ever, but it cannot reach segmented systems or test exploits that don't exist. A layered validation approach closes the blind spots.
A coordinated takedown by Microsoft, Japanese authorities and international partners has shut down a sprawling cybercriminal infrastructure that distributed over a billion phishing messages to organizations across 150 countries.
A high-severity authentication bypass in Ivanti Connect Secure has been exploited in the wild since October, prompting CISA to mandate patches for federal agencies and urge all organizations to update immediately.
A newly discovered Android trojan replaces legitimate banking applications with compromised versions that neutralize signature verification, accessibility checks, and device integrity validation to harvest credentials.
A new security harness from Chainguard uses frontier AI models to detect exploitable flaws that traditional scanners miss, while research shows two-thirds of billion-dollar companies knowingly leave critical bugs unfixed.
