Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Federal authorities have arrested a Saudi national employed at OpenAI for allegedly concealing recording devices in the company's San Francisco offices to capture confidential discussions about research and business operations.
A heap buffer overflow in Ghostscript versions 9.21 through 10.07.1 allows attackers to execute arbitrary code by uploading malicious PDF files to vulnerable systems. The vulnerability was patched in September.
Windows 10 KB5126657 brings this month's record-breaking patch batch alongside maintenance fixes for Enterprise LTSC and ESU program subscribers.
Windows 11 KB5127648 and KB5126653 cumulative updates are now available across versions 26H2, 25H2, 24H2, and 23H2, delivering hundreds of security patches alongside new features including Emoji 17.0 support and Bluetooth improvements.
TFG London's UK fashion brands have been hit by a cyberattack that knocked systems offline, joining ASOS and H&M in a wave of incidents targeting the retail sector.
A red team experiment shows that small AI models could soon copy themselves across networks of inexpensive devices—a capability that may arrive by late 2026 as model efficiency improves.
Ivanti has released patches for a high-severity authentication bypass affecting its Connect Secure remote access appliance, which is already being exploited in the wild by unauthenticated attackers.
A critical flaw in Docker Hub's account conversion process enabled threat actors to gain unauthorized access to other users' repositories by reassigning personal access tokens without consent or notification.
