Collaborate Disseminate
Researchers disclose rapid exploit chain that let attackers run code via a single malicious web page Security issues continue to pervade the OpenClaw ecosystem, formerly known as ClawdBot then Moltbot, as multiple projects patch bot takeover and remote… Continue reading OpenClaw patches one-click RCE as security Whac-A-Mole continues
Breach lingered for months before stronger signature checks shut the door A state-sponsored cyber criminal compromised Notepad++’s update service in 2025, according to the project’s author.… Continue reading Notepad++ update service hijacked in targeted state-linked attack
Don’t be scared of the digital dark – learn how to keep the lights on Opinion Barely a month into 2026, electrical power infrastructure on two continents has tested positive for cyberattacks. One fell flat as attempts to infiltrate and disrupt the Pol… Continue reading Infrastructure cyberattacks are suddenly in fashion. We can buck the trend
Your cloud security must stand alone Partner Content As cloud adoption accelerates, many organizations are increasingly relying on the native security features offered by cloud service providers (CSPs). The ability to manage web application firewalls … Continue reading Why native cloud security falls short
Also, South Korea gets a pentesting F, US Treasury says bye bye to BAH, North Korean hackers evolve, and more Infosec in Brief As if AI weren’t enough of a security concern, now researchers have discovered that open-source AI deployments may be an eve… Continue reading Open-source AI is a global security nightmare waiting to happen, say researchers
‘I did not think it was going to happen to me, but here we are’ Nearly every company, from tech giants like Amazon to small startups, has first-hand experience with fake IT workers applying for jobs – and sometimes even being hired. … Continue reading AI security startup CEO posts a job. Deepfake candidate applies, inner turmoil ensues.
Consider yourselves compromised, experts warn Ivanti has patched two critical zero-day vulnerabilities in its Endpoint Manager Mobile (EPMM) product that are already being exploited, continuing a grim run of January security incidents for enterprise IT… Continue reading January blues return as Ivanti coughs up exploited EPMM zero-days
Parent company Cognizant hit with multiple lawsuits Thousands more Oregonians will soon receive data breach letters in the continued fallout from the TriZetto data breach, in which someone hacked the insurance verification provider and gained access to… Continue reading Thousands more Oregon residents learn their health data was stolen in TriZetto breach
BellSoft survey finds 48% prefer pre‑hardened images over managing vulnerabilities themselves Java developers still struggle to secure containers, with nearly half (48 percent) saying they’d rather delegate security to providers of hardened containers … Continue reading Java developers want container security, just not the job that comes with it
The call is coming from inside the house opinion Maybe everything is all about timing, like the time (this week) America’s lead cyber-defense agency sounded the alarm on insider threats after it came to light that its senior official uploaded sensitiv… Continue reading Maybe CISA should take its own advice about insider threats hmmm?