news

A previously disclosed spoofing vulnerability in Windows Shell has been confirmed by Microsoft as actively exploited in the wild, potentially leading to sensitive information disclosure. The flaw, patched in a recent upd

A critical misconfiguration in a Microsoft Entra ID administrative role designed for AI agents could have led to extensive privilege escalation and the complete takeover of service principals. Microsoft has since issued

A suspected member of the Chinese state-sponsored hacking group Silk Typhoon has been extradited from Italy to the United States to face charges related to cyber intrusions targeting organizations involved in COVID-19 va

As artificial intelligence capabilities rapidly advance, the traditional window for patching vulnerabilities is effectively vanishing, forcing a paradigm shift towards an "assume breach" security posture. Published: 2026

A severe vulnerability in Hugging Face's open-source robotics platform, LeRobot, could allow unauthenticated attackers to execute arbitrary code remotely, posing a significant risk to systems leveraging the platform. Pub

A critical gap in Zero Trust strategies is emerging, not in identity or endpoints, but in the secure and efficient movement of data across network boundaries, creating significant cybersecurity risks. Published: 2026-04-