Cyber Attacks
View all
Haiku 4.5 Hallucination: Anthropic Disables Web Access After AI Fakes Philly Murder Report
An AI model filed a fake murder report during internal testing, highlighting risks of unrestricted web access for automated agents.
Cloud Security
View all
Vulnerabilities
View all
Vulnerabilities
ASP.NET Core DoS vulnerability CVE-2026-70181 allows unauthenticated memory exhaustion in versions 8, 9 and 10
Microsoft releases fixes for a high-severity denial of service vulnerability in ASP.NET Core that allows unauthenticated attackers to exhaust server memory.
Vulnerabilities
Windows Rich Text Edit Heap Overflow CVE-2026-70096 Enables Unauthenticated Network Code Execution
A critical buffer overflow in the Windows Rich Text Edit Control allows network-based remote code execution by unauthorised attackers, according to Microsoft.
Vulnerabilities
Microsoft PostScript Driver Buffer Overflow Enables Remote Code Execution
A critical heap-based buffer overflow in the Microsoft PostScript Printer Driver allows attackers to execute code over a network.
Vulnerabilities
WordPress AGE-GATE RCE: Admin.php Input Flaw Enables Unauthenticated Code Execution
The AGE-GATE plugin for WordPress allows unauthenticated remote code execution via unsanitized parameters in versions up to and including 1.0.
Data Breaches
View all
Data Breaches
Data Classification Mistakes That Expose Your Infrastructure
Data Breaches
Credit Freezes: 6 Common Misunderstandings That Leave You Exposed
Data Breaches
Email Account Compromise Prevention Checklist for Secure Operations
Data Breaches
Password reuse is a security risk: how to break the chain
Latest news
Threat Intelligence
Identity Fraud Scheme: North Korean IT Workers Infiltrate US Firms
DOJ charges 14 in conspiracy using stolen identities to secure remote tech roles at over 70 American companies, generating illicit revenue.
Threat Intelligence
Strategic Threat Intelligence: 6 Misreadings That Waste Resources
Strategic threat intelligence predicts long-term adversary shifts rather than providing immediate indicators for daily operational blocking.
Malware & Ransomware
How to Implement XDR: A Practical Step-by-Step Rollout Plan
Extended detection and response shifts security from siloed alerts to unified context, reducing noise by correlating signals across endpoints, networks and cloud workloads simultaneously.
Malware & Ransomware
Browser Hijacker Removal: Response and Recovery Steps
Browser hijackers often install root-level persistence mechanisms that survive standard browser resets, requiring deep system analysis.
Malware & Ransomware
Stop SEO Poisoning: A Technical Prevention Checklist for Web Defenders
Search engine optimisation poisoning redirects users to malicious sites by exploiting trust in search rankings, requiring technical controls beyond basic content audits.
Malware & Ransomware
Logic Bomb Prevention Checklist for Secure Code
Logic bombs hide in legitimate software and execute only when a specific condition is met, making them invisible to standard signature-based scanning tools.
Malware & Ransomware
Are browser extensions safe? Verify permissions and code sources
Browser extensions run with elevated privileges inside your browser, allowing them to read every page you visit and intercept network traffic before encryption occurs.
Malware & Ransomware
How to Prevent Computer Viruses: The Hierarchy of Controls
Executing files from untrusted sources remains the primary infection vector, making user behaviour the most effective defence against persistent malware.