Microsoft assigned CVE-2026-21520 to a Copilot Studio prompt injection vulnerability and patched it in January — but in ...

PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...

Backed by Sonatype's industry-leading security research team, Sonatype Repository Firewall helped customers prevent 136,107 open source malware attacks in Q1. To explore the full findings from the Q1 ...

Financial institutions are rexamining how to manage emerging fraud risks, and deepfake-enabled identity fraud can be particularly complex.

Exposed LLM servers are being actively scanned and exploited. Learn how attackers find misconfigured AI infrastructure and ...

When Anthropic quietly told a small group of cybersecurity firms in early April 2026 that it had built an AI tool capable of ...

Learn how to secure Model Context Protocol (MCP) host-client communication using lattice-based PQC standards like ML-KEM and ML-DSA against quantum threats.

The 2024 XZ incident illustrates how open-source software (OSS) has become strategic infrastructure in the global economy, ...

CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.

Toshiba Electronic Devices & Storage Corporation (“Toshiba”) has started to ship engineering samples of “TB9M030FG,” the ...