News & Resources

OWASP Top 10 2021 adds two new risk categories that reset priorities for web application security. The update reflects testing data and observed attack behavior. It also clarifies …

Oracle EBS ransomware attack disclosures are mounting as the CL0P group names nearly 30 alleged victims tied to Oracle E-Business Suite. The activity centers on data theft and …

Australia sanctions North Korea hackers in a new enforcement action targeting revenue that funds Pyongyang’s prohibited weapons programs. The measures designate individuals and entities tied to state backed …

Android spyware resurfaced in a campaign called Landfall that exploited a Samsung zero-day vulnerability to penetrate phones and siphon data. Researchers observed privilege escalation, stealthy persistence, and command …

Keras Data Exposure surfaced with a newly disclosed issue in the deep learning framework, raising concerns about training data privacy. Security teams should harden machine learning pipelines now. …

Google Wiz acquisition received antitrust clearance from the U.S. Department of Justice, advancing the $32 billion transaction toward close. The decision indicates no planned challenge in the United …

The Congressional Budget Office hack drew swift action from the agency and federal partners. CBO contained the incident and began deploying additional safeguards. Investigators have not yet disclosed …

Chrome 142 update delivers essential security fixes across Windows, macOS, and Linux. Google is rolling out the Stable release over the coming days with safety and stability prioritized. …

Russian cyberattacks on Ukraine are shifting from government and energy to the grain economy. Investigators report destructive activity aimed at storage, logistics, and port operations. The objective is …

Credit card fraud rings are again under scrutiny after the U.S. Secret Service arrested 18 suspects tied to coordinated payment card schemes. The operation targeted skimming, counterfeit cards, …