39 posts published in the last hour 20:38AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope 20:38From Rules to AI and Back 20:37DreamHost Forces Password Resets Amid Ongoing Security Incident 20:37Wiz’s…
AWS becomes first CSP to complete the Cloud High profile assessment with 172 services and features in scope
We continue to expand the scope of our assurance programs at Amazon Web Services (AWS) and are pleased to announce the successful completion of our first…
From Rules to AI and Back
Fraud prevention combines rules, AI and behavioral analytics to stop scams, reduce false declines and keep automated decisions explainable through human…
DreamHost Forces Password Resets Amid Ongoing Security Incident
Due to a disruption of access to DreamHost’s File Manager and webmail services as a result of an incident, certain email and FTP/SFTP accounts were forced…
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70%…
Python jettisons the native JIT, at least for now
The experimental just-in-time compiler, or JIT, for CPython will be removed after its maintainers missed deadlines for its formalization set by the Python…
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked…
Energy Giant Engie Notifies Customers of Supply Chain Breach
An undisclosed number of Engie customers have had their data compromised after a supply chain incident
Fake Court Phishing Campaign Targets More Than 100,000 Companies
Fake court notices target more than 100,000 companies in a LodaRAT phishing campaign. Learn how the attack works and what security teams should check.
UNM Health addresses cyberattack in New Mexico after ransomware group claims responsibility
John Rupolo reports: University of New Mexico Health is addressing concerns after a cyberattack on Monday, with reports surfacing this week that a…
Black October: A Cybersecurity Today Special Edition
Black October in Cybersecurity: PHP RCE Panic, Brotli Surprise, and Why Basics Still Matter In this special episode of Cyber Security Today, Jim and David…
What Is IoT Security? A Homeowner’s Guide to Protecting Smart Devices
IoT security is the practice of protecting the internet-connected devices in your home, like smart cameras, speakers, TVs and thermostats, from hackers.…
Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
The lawsuit, brought by a former executive at Dominion Voting Systems, concerns comments made in a 2020 film financed by Byrne titled “The Deep Rig.”
Limited reports of PHP bug exploitation emerge
One cyber firm listed a half-dozen exploitations of the PHP2Shell bugs, and another identified a well targeted, suspected Chinese campaign that breached…
Part 3 – Cybersecurity journeys: The work behind the work
The most important work I’ve done in cybersecurity would make for terrible television. There were no countdown clocks and no frantic typing, just a lot of…
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70%…
AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
Nvidia’s Mark Weatherford says CISOs must translate AI cybersecurity risks into business priorities, clarify risk ownership and balance innovation with…
Microsoft Authenticator Flaw Scores 8.6: Android Users Must Update
Microsoft Authenticator flaw CVE-2026-80097 scores 8.6 and puts Android work account tokens at risk. Learn which versions are affected and how to stay…
A RIZAP Employee Uploaded 726 People’s Health Records to a Personal AI Chat
Rowan Sterling reports: On 20 August 2026 an employee of RIZAP Inc., the Japanese fitness and health-guidance group, was pulling records out of the…
Japan’s GMO Internet Urges Customers to Disconnect PCs
GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack
Florida education department says data breach may affect 4.9 million people
Eric Weiss reports: The Florida Department of Education says a breach of its student financial aid website may have exposed personal information,…
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware
Serbian Prosecutor Who Investigated Belgrade Trump Tower Project ‘Targeted with Spyware’
New findings by the Citizen Lab and SHARE Foundation show that a prominent supporter of Serbia’s student movement was targeted with spyware.
Fake crypto app on Apple App Store linked to $23K wallet theft
A fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of…