VULNERABILITY

Cybersecurity experts from all over the world came together for the RSAC 2026 Conference to talk about how digital security is changing This article.

A group at Rutgers University showed off a new piece of biometric authentication software that works with extended reality (XR) headsets This article.

Microsoft Defender for Endpoint was the first EDR solution to work with CrowdStrike's Falcon Next-Gen SIEM This article explores platform crowdstrike ceo.

More than half a million lines of source code for Anthropic's Claude Code package were made public by mistake This article explores attack software.

Chainguard launched Factory 2.0, a new version of its tool for handling hardened open-source images and secure software artifacts, components, and images.

AI-assisted development has made autonomous attacks a normal part of the threat landscape. As a result, AI has created what Manoj Nair calls a "governance.

As CEO of Approov, Ted Miracco is in charge of projects that protect mobile apps and API endpoints from automated threats This article explores automated.

Tim Chang from Thales says that bots are now "mimicking humans" well enough that old defenses aren't working as well This article explores data bots.

The speed at which AI is changing how software is made is something the industry never thought possible This article explores security testing gartner.

Discover how The vulnerability could affect about 1 billion people who use the popular chat app. Michael DePlante, a researcher with the Trend Micro Zero.

People are actively using a flaw in F5's BIG-IP application security product line in the wild This article explores attacks cve 2026. . On Saturday, F5.

By the end of 2029, Google says it will add post-quantum cryptography (PQC) to its products, services, and systems This article explores end 2029 google.

A serious flaw in Langflow, an open source framework for making AI agents, has been used in the real world This article explores vulnerabilities kev.

Sonatype's new research shows that "frontier" AI models often make wrong or made-up suggestions for software dependencies This article explores grounding.

Checkmarx said on Tuesday that attackers had broken into a version of Keeping Infrastructure as Code Secure (KICS), the open source static code analysis.

RSAC 2026 CONFERENCE – San Francisco – A lot of people think that artificial intelligence will change the game for cybersecurity, but one researcher.

Discover how A big AI-assisted campaign for an OpenClaw Docker deployer package is sending out more than 300 Trojanized GitHub packages that steal data.

Organizations' use of AI agents has greatly increased their attack surface, making them more vulnerable to new types of attacks. However, software and.

RSAC 2026 CONFERENCE IN SAN FRANCISCO: Do AI systems need a "human in the loop," or will people just slow things down This article explores security ai.

After hacking Trivy, a popular cloud security scanning tool, a threat actor is systematically going after cloud credentials, SSH keys, authentication.

At the RSAC 2026 Conference in San Francisco, the question was whether AI deployments need a "human in the loop" or if people will just slow things down.

This week, Oracle broke its usual patch cycle to tell people about a serious security hole in its Fusion Middleware This article explores attackers use.

Companies that are rushing to connect their LLM-powered apps to outside data sources and services using the Model Context Protocol (MCP) may be making.

NEW Cybersecurity experts call software programs "infostealers" when they take people's information, like their credit card numbers, personally.

Cybersecurity experts call software programs "infostealers" when they take people's information, like their credit card numbers, personally identifiable.

New research shows that the infamous GlassWorm malware has infected many more Open VSX software packages This article explores software glassworm. . Last.

Discover how The Cybersecurity and Infrastructure Security Agency (CISA) recently gave a big emergency order: all federal agencies must disconnect any.

In the most recent episode of our monthly Reporters' Notebook video series, Tara Seals from ZeroOwl, Sharon Shea from TechTarget Search Security, and.

A new Android-based banking Trojan is trying to steal mobile payments in Brazil as they are being sent This article explores banking trojan specifically.

This month, an unknown threat actor got into one of application security vendor Xygeni's GitHub Actions by poisoning a tag This article explores github.