2+ hour, 13+ min ago  (378+ words) Software supply chain security was hard enough. Then AI joined the build pipeline. For five years, "software supply chain security" meant one question: what's in your code? Which open-source packages, which versions, which transitive dependencies three layers deep that nobody…...

19+ hour, 4+ min ago  (374+ words) An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern (aka Cav3rn) targeting Israeli organizations. The activity, which has primarily singled out IT providers and government sectors,…...

1+ day, 2+ hour ago  (378+ words) Building a shortlist for an AI SOC evaluation can be tough. SIEM, SOAR, and pureplay AI SOC vendors are all saying the same thing. But behind the identical label sit very different products, from chat assistants bolted onto a legacy…...

1+ day, 6+ hour ago  (1089+ words) Scanners meant to catch malicious add-on "skills" for AI coding agents can be fooled by a few simple changes that leave the malware working, according to a'new study'from researchers at the Hong Kong University of Science and Technology. Their strongest…...

3+ day, 16+ hour ago  (737+ words) Security firm run Zero has'disclosed seven vulnerabilities'in'Fat Fs, a small filesystem library that lets a device read and write the FAT and ex FAT formats used on USB drives and SD cards. The flaws matter because Fat Fs is nearly…...

3+ day, 17+ hour ago  (832+ words) A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine as root. It affects Linux desktops, servers, and Android, and a fix is out. Bad Epoll…...

3+ day, 21+ hour ago  (382+ words) Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft. "The lookalike packages place themselves in the same rollup,…...

4+ day, 5+ hour ago  (383+ words) Cybersecurity researchers have flagged a new mac OS information stealer called Pam Stealer that employs a series of clever tricks to infect systems and siphon sensitive data. The stealer, discovered by Jamf Threat Labs, is distributed as a compiled Apple…...

5+ day, 1+ hour ago  (1462+ words) To understand why identity lifecycle management breaks down around AI agents, you need to understand what it was built to do well and who it was built for. The entire architecture rests on a single foundational assumption: every identity maps…...

5+ day, 17+ hour ago  (692+ words) Argo CD, a widely used tool for deploying software to Kubernetes, has an unpatched flaw in its repo-server component that lets an unauthenticated attacker run code, provided they can reach the component's internal network port. Synacktiv, which found the bug,…...