LATEST

Amazon's platform for making AI-powered apps is called AWS Bedrock This article explores attacker bedrock updateguardrail. . It gives developers access to.

This March, the Trivy ecosystem had its second big security breach. The first was a supply-chain attack that made the official GitHub Action used to run.

Researchers have found a huge global security risk that comes from using old Microsoft Internet Information Services (IIS) servers This article explores.

CanisterWorm is a self-propagating malware campaign that is bringing a new wave of supply chain attacks to the npm ecosystem. The threat, which is.

Microsoft has warned that new campaigns are taking advantage of the upcoming tax season in the U.S This article explores malware email campaigns. . to.

The supposed AstraZeneca data breach shows that the LAPSUS$ hacking group is back in action. They are now quietly selling claims of deep access to source.

According to new research, hackers are actively using a serious flaw in Quest KACE Systems Management Appliance (SMA) to get into systems without.

After a breach involving its outsourcing partner, Telus, a threat actor is said to have stolen about 100 GB of private user data from Crunchyroll, the.

A new malware campaign is going after businesses in the healthcare, government, education, and hospitality sectors This article explores purelog stealer.

The Known Exploited Vulnerabilities catalog now includes a serious flaw in Craft CMS (CVE-2025-32432) that has been confirmed to be actively used in the.