News
105 stories
Editor's Pick
CISA Issues Binding Operational Directive 26-04 Requiring Rapid KEV Remediation on Publicly Exposed Federal Assets
· 1 min read
Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence
Threat Intelligence
Kaspersky Tracks StrikeShark as New Cobalt Strike Loader Exploits Legacy CVEs Against Diplomatic and Government Networks
· 2 min read
Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence
Threat Intelligence
CVE-2026-46331 Linux Kernel Flaw Enables Root Escalation via Traffic Control Subsystem Across Major Distributions
· 2 min read
Senior security reporter covering threat intel, identity, and enterprise security architecture. Cloud Security
Cloud Security
Amazon Q Developer Flaw CVE-2026-12957 Lets Malicious Repositories Harvest Developer Cloud Credentials
· 2 min read
Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence
Threat Intelligence
DPRK-Linked macOS.Gaslight Backdoor Uses Prompt Injection to Evade AI-Assisted Malware Analysis
· 2 min read
Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence
Threat Intelligence
CISA Adds Critical PTC Windchill RCE Flaw CVE-2026-12569 to KEV With June 28 Deadline
· 2 min read
Senior security reporter covering threat intel, identity, and enterprise security architecture. Threat Intelligence
Threat Intelligence
Miasma Supply Chain Worm Weaponizes GitHub Actions to Steal CI/CD Secrets
· 2 min read
Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence
Threat Intelligence
CISA Flags Three Max-Severity Ubiquiti UniFi OS Flaws as Actively Exploited
· 2 min read
Senior security reporter covering threat intel, identity, and enterprise security architecture. Cloud Security
Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence
Threat Intelligence
CISA Flags Critical Lantronix Serial Device Flaw CVE-2025-67038 as Actively Exploited, Deadline June 26
· 1 min read
Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence
Threat Intelligence
Operation Endgame Seizes 326 Servers as Law Enforcement Dismantles Amadey, StealC, and SocGholish Networks
· 1 min read