Cybersecurity news, vulnerabilities, data breaches, and security best practices.
CISA and NSA, along with 19 international partners, released comprehensive guidance urging global adoption of Software Bills of Materials to strengthen software supply chain security.
Security researchers highlight credential storage, prompt injection risks, and extended attack surface in local AI agents.
Google releases security update for Windows, macOS, and Linux addressing inappropriate implementation in Background Fetch API.
Organizations urged to update as vulnerability could allow attackers to compromise backup infrastructure.
January security updates address vulnerabilities across creative suite applications used by millions.
CVE-2026-1245 affects all versions of the npm library prior to 2.3.0, used widely for parsing binary data.
Reports from multiple sources highlight power availability as key bottleneck for AI data center expansion.
CVE-2026-23550 (CVSS 10.0) allows unauthenticated privilege escalation on 40,000+ WordPress sites.
CVE-2025-20393 (CVSS 10.0) fixed after China-linked UAT-9686 deployed backdoors on Secure Email Gateway appliances.
Major Linux distributions released synchronized kernel updates addressing memory safety, networking, and file system vulnerabilities with moderate severity ratings.
Microsoft's latest threat intelligence reveals AI-generated phishing emails are 4.5x more effective than traditional attempts, marking a new era in social engineering attacks.
Adobe's January security update addresses 25 CVEs across 11 products including InDesign, Illustrator, and ColdFusion, with none under active exploitation.