Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the…
Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems. The vulnerabilities are listed below - CVE-2026-63688 (CVSS score: 10.0) - A missing authentication for…
One company told customers to power down its data-protection platform during a nine-hour window, while the other remained mum on reported attacks prior to releasing a patch for its product.
Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.
Organizations may face an artificial intelligence (AI) reckoning over the next year. Omdia and Gartner weigh in on how to tackle the governance, security, and value challenges ahead.
St. Lucie County in Florida discovered (alt link) a dozen Flock cameras whose ownership it can’t identify, and that the county government had not permitted. I am reminded of the decade-old story of StingRay cell phone surveillance devices in Washington, DC, whose operators were also unknown. My…
Organizations don’t need better vulnerability scanners; they need to know who owns their assets, and who has the authority and capacity to actually fix them.
The health tech software giant, which makes the widely used MyChart system for accessing medical data, will focus on fixing security bugs for the next few weeks.
A trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it’s hard to tell they’re not.
The quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner, the SIEM and the EDR console. Someone is building a spreadsheet to reconcile them. Someone else is turning that spreadsheet into slides…
This essay was written with Nathan E. Sanders, and originally appeared in The Guardian. New campaign finance disclosure data shines a light on which US political campaigns are using AI tools and how much they are spending on them. Candidates’, parties’ and committees’ spending reveals that AI is…
Google has announced a new security measure that limits access to Android’s accessibility services to verified applications classified as Accessibility Tools when Advanced Protection is enabled.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8)…
Law enforcement from multiple countries collaborated to disrupt a cybercrime operation that has claimed some 500 victims worldwide in the past two years.
Anthropic, Z.ai’nin açık ağırlıklı GLM-5.3 yapay zekâ modelini siber güvenlik görevlerinde sınadı ve bazı kontrollü testlerde yazılım açıklarından yararlanabildiğini bildirdi. Şirketin 29 Eylül tarihli araştırması, modelin güvenlik önlemlerinin farklı koşullarda aşılabildiği iddiasını da içeriyor.
A year-old Chinese threat actor looks like a cybercrime gang, acts like a state-associated APT, and attacks organizations in unexpected places.
Researchers at Northeastern University, in collaboration with Consumer Reports, evaluated how much modern cars spy in their drivers: The new Northeastern study shows, for the first time, data flowing among the vehicles, the vehicle apps you download when you buy your car, and third-party companies…
Airbus, 2011 yılında kurulan Fransız siber güvenlik şirketi Quarkslab’ı satın aldı. Düzenleyici kurumların onaylarının ardından tamamlanan işlem, Airbus’ın Avrupa’daki siber güvenlik faaliyetlerini genişletme stratejisinin bir parçası olarak gerçekleştirildi.
The dangerous part only appears after ChatGPT has already earned your trust.
WhatsApp, çocukların güvenliğini artırmak için yeni WhatsApp ebeveyn denetimleri sunuyor. İşte gizlilik ve güvenlik ayarlarındaki tüm yenilikler.
The new White House Accord on so-called “Super Intelligence” calls on companies to implement greater controls and oversight over AI safety.
The Department of Defense notified millions of current and former U.S. military personnel that their personal information had been stolen in a months-long breach.
New Swimlane research underscores a paradox: While AI detection and response is essential to giving defenders an edge, one in four security pros say AI limits their skill development.
One of the more secure Linux distributions has added another feature to help further lock it down.
72 active sources
27 Turkish · 45 English
All sources
