Independent reporting on AI security, exploited vulnerabilities, and enterprise cyber risk. Built to help defenders understand what changed and what deserves action.
Cybersecurity
Conversation history poisoning lets attackers plant fabricated approvals and prior actions in local AI agent state. New Darktrace research shows why teams must authenticate stored context, restrict tool authority, and monitor execution.
Read intelligence ↗
Cybersecurity
Tor critical vulnerabilities in version 0.4.9.13 affect relays, clients, and onion services, including memory safety and stream isolation flaws. Learn how to identify exposed components, upgrade safely, verify the deployed version, and monitor for anonymity or availability impact.
Read intelligence ↗
Cybersecurity
A new Honeywell benchmark finds only 21% of industrial security leaders report a complete OT asset inventory, even as 88% call their programs mature. Learn how to close visibility gaps before AI-driven defenses act on incomplete data.
Read intelligence ↗
Cybersecurity
Check Point disclosed active exploitation of CVE-2026-93616 on September 22, 2026, exposing security management and log servers to unauthenticated script execution. Learn how to identify affected systems, restrict port 19009, patch safely, hunt for compromise, and recover the management plane.
Read intelligence ↗
Cybersecurity
The indexed-btree campaign shows how malicious npm packages can look clean during installation and execute only when an application calls normal library code. Learn how to combine package provenance, runtime monitoring, secret isolation, and clean rebuilds to contain the risk.
Read intelligence ↗
Cybersecurity
The ShinyHunters Clop hack exposed how quickly a ransomware leak site can become another compromised system, putting operator logs, onion keys, and visitor trust at risk. Learn what the incident changes for breach response, evidence handling, and long-term monitoring.
Read intelligence ↗
Cybersecurity
The Click2Shell WordPress vulnerability lets a crafted link force an administrator's site to install and preview an attacker-selected theme, which can chain into remote code execution. Learn which versions to update, how the attack works, and what to review after patching.
Read intelligence ↗
Cybersecurity
The Rapuncel infostealer campaign impersonates at least 40 software companies through search-optimized GitHub repositories, then uses signed binaries and a vulnerable driver to evade defenses. Learn how to verify downloads, harden endpoints, and respond to suspected exposure.
Read intelligence ↗
Cybersecurity
The Gyazo data breach exposed 23.62 million user records and 490 million image metadata records. Learn how screenshot retention, OCR, EXIF data, and bearer-style links turn quick captures into long-lived security risk.
Read intelligence ↗Showing 28-36 of 314 articles