Anthropic OSS Scanner
Overview Anthropic has launched OSS Scanner, an opt-in service designed to use AI models to conduct periodic vulnerability assessments of selected open-source projects at no […]
Month: October 2026
When the Remote Access Gateway Becomes the Attack Path
Overview A maximum-severity vulnerability in SonicWall SMA1000 appliances is now being targeted by attackers only days after a security update was released. Tracked as CVE-2026-102255, […]
When the Public Internet Becomes a Threat Intelligence Sensor
Overview VirusTotal is expanding its threat intelligence capabilities with daily scanning of the public IPv4 space, providing visibility into exposed services, ports, server fingerprints and […]
Microsoft Teams Deepfake Detection
Overview Microsoft Teams is preparing to introduce synthetic audio and video detection through certified third-party providers, giving organisations another security signal for identifying potentially manipulated […]
When Cloud Infrastructure Becomes the Business Continuity Risk
Overview A ransomware attack against Japanese cloud provider IDC Frontier has disrupted part of its IDCF Cloud infrastructure, affecting 495 companies and local governments using […]
Malicious Firefox Extensions
Overview Sixteen malicious Firefox extensions masquerading as cryptocurrency wallets, browser utilities and desktop tools have been discovered stealing wallet recovery phrases and private keys. The […]
When a Logic Flaw Becomes a $53 Million Security Breach
Overview The conviction of a Maryland man for stealing more than $53 million from decentralised cryptocurrency exchange Uranium Finance brings renewed attention to a fundamental […]
Rockstar Games Breaches
Overview Rockstar Games has faced a series of separate security incidents involving proprietary source code, 78.6 million business records and material described by researchers as […]
AI Vulnerability Discovery
Overview Artificial intelligence is changing vulnerability research at a pace that is difficult for traditional security processes to match. Anthropic says its Project Glasswing initiative […]
When Stored XSS Becomes Persistent Administrator Access
Overview A new WordPress campaign demonstrates how a seemingly familiar vulnerability such as stored cross-site scripting can become far more serious when it is chained […]