LATEST

An AI system cuts the time it takes to reconstruct an attack from weeks to hours.

In order to enable security teams to more rapidly determine whether their systems are resistant to the most recent attacks, a federal lab seeks to improve the efficiency of threat emulatio

2025 served as a reminder to safeguard human judgment rather than just systems.

COMMENTARY I keep returning to one unsettling realization about 2025 as 2026 gets underway. Attackers were not misinterpreted by us. We misinterpreted failure.

The majority of the d

The malware GootLoader uses 500–1,000 Concatenated ZIP Files to Avoid Recognition

GootLoader, a JavaScript (also known as JScript) malware loader, has been seen to use a corrupted ZIP file that is intended to evade detection by concatenating between 500 and 1,000 archiv

Fix Critical Vulnerabilities in Go 1.25.6 and 1.24.12 to Reduce the Risk of DoS and Memory Exhaustion

Go 1.25.6 and 1.24.12 are emergency point releases that the Go programming language team released to fix six serious security vulnerabilities This article explores release go1. . These upd

New AWS Console Supply Chain Attack Lets Attackers Hijack AWS GitHub Repositories

Key AWS-owned GitHub repositories, including the popular AWS JavaScript SDK that powers the AWS Console itself, were taken over by unauthenticated attackers due to a crucial misconfigurati

APT Associated with China Used Sitecore Zero-Day to Infiltrate Critical Infrastructure

Since at least last year, critical infrastructure sectors in North America have been the target of a threat actor that is probably affiliated with China This article explores ttps uat 8837

Five Dangerous Chrome Add-ons Workday and NetSuite impersonation for account theft

"The extensions work in concert to steal authentication tokens, block incident response capabilities, and enable complete account takeover through session hijacking," stated Socket securit

NSA Issues Implementation Guidelines for Zero Trust

The first two publications in the National Security Agency's Zero Trust Implementation Guidelines series, which offer helpful advice to assist organizations in implementing Zero Trust secu

Google Project Zero Unveils a Complex Zero-Click Exploit Chain Aimed at the Pixel 9

Project Zero has revealed a complex zero-click exploit chain that targets the Pixel 9 smartphone, proving that extremely sophisticated attacks are still feasible even in the face of contem

Go Programming Language 1.26 Fixes Several Memory-Depleting Vulnerabilities

For versions 1.25.6 and 1.24.12, the Go programming language team has released security updates that fix six serious flaws, including denial-of-service attacks, memory exhaustion, and arbi