News & Resources

ICS security vulnerabilities dominated this month’s industrial Patch Tuesday as Siemens, Rockwell Automation, Aveva, and Schneider Electric released coordinated fixes and mitigations. Several flaws enable remote exploitation in …

AI pentesting platform startup Tenzai raised $7.5 million in seed funding to advance its autonomous security testing technology. The company will use the capital to scale product development …

Triofox vulnerability CVE-2024-12087 is under active exploitation, and administrators should patch immediately. The flaw can enable Triofox remote code execution and full server compromise. SecurityWeek reports ongoing attacks …

Firefox privacy protection received a significant update that Mozilla says cuts trackable users by about half. The release expands defenses against browser fingerprinting and cross site tracking. Early …

SAP security patches released this month address critical flaws in SQL Anywhere and Solution Manager. The updates mitigate risks that could enable system compromise if ignored. SAP customers …

CMMC requirements are moving from promises to proof as the Pentagon advances its Cybersecurity Maturity Model Certification program. The Defense Department wants verified safeguards across the defense industrial …

LLM side channel attack research known as Whisper-Leak shows attackers can infer prompt topics without viewing the text. The technique uses inference time signals to classify user intent …

LLM side channel attack research is in the spotlight after a technique called Whisper-Leak showed that attackers can infer user prompt topics without direct access. Researchers demonstrated that …

AI companies GitHub secrets are under scrutiny after SecurityWeek reported exposed credentials across multiple Forbes AI 50 firms. Public repositories contained cloud keys and tokens. Researchers found access …

runC container escape vulnerabilities allow attackers to break isolation and reach the host. SecurityWeek reported multiple issues that affect runC users across platforms. The most severe issue, the …