Europol’s annual report warns of a growing threat from aligned state and cybercrime groups, enabled by AI technologies

The Cybersecurity and Infrastructure Security Agency (CISA) adds CVE-2025-24472 and CVE-2025-30066 to its Known Exploited Vulnerabilities Catalog.

CERT NZ issued a critical advisory for CVE-2025-24813, a severe Apache Tomcat vulnerability affecting multiple versions.

Overwhelmed AppSec teams are turning to agentic AI to handle the tedious manual work of security reporting, threat modeling, and code reviews, but successful implementation requires careful human oversight.

The refreshed initiative aims to meet increased demand for PAM solutions and drive revenue growth for partners

The refreshed initiative aims to meet increased demand for PAM solutions and drive revenue growth for partners

By simply sending HTTP requests, attackers can trigger the deserialisation of malicious data in Tomcat's session storage and gain control.

Newly discovered vulnerability ZDI-CAN-25373 takes advantage of Windows shortcuts has been exploited by 11 state-sponsored groups since 2017

Research finds that organizations are granting root access by default and making other big missteps, including a Jenga-like building concept, in deploying and configuring AI services in cloud deployments.

CISA this week added CVE-2025-24472 to its catalog of known exploited vulnerabilities, citing ransomware activity targeting the authentication bypass flaw.

Trend Micro uncovered a method that nation-state threat actors are using to target victims via the Windows .Ink shortcut file extension.

Several major companies in the finance sector were impacted by the third-party breach, prompting them to notify thousands of customers of their compromised data.

Ransomware attackers know where your kids go to school and they want you to know it, according to professional negotiators at Sygnia.

FBI warns computer users to keep an eye out for malware, including ransomware, distributed through working document converters.

New guidance from the NCSC outlines a three-phase timeline for organisations to transition to quantum-resistant encryption methods by 2035.

A message posted on Monday to the homepage of the U.S. Cybersecurity & Infrastructure Security Agency (CISA) is the latest exhibit in the Trump administration's continued disregard for basic cybersecurity protections. The message instructed recently-fired…

Global politics and a growing economy draw the wrong kind of attention to India, with denial-of-service and application attacks both on the rise.

The NCSC has published advice on the transition, with a ten-year timeline for change

The Arizona-based bank has begun notifying affected customers