AI model discovers cryptographic weaknesses in HAWK and AES
The HAWK attack exploits a previously unknown symmetry in the lattice structure of the signature scheme, enabling a key recovery in approximately three hours...
SC Media
20 articles
Cyberattacks on emergency systems have become a tool of psychological warfare
Emergency communications systems are an oft-neglected part of protecting critical infrastructure.
CubePilot hit by DNS hijacking attack, warns of potential credential theft
The attack, which occurred on July 24, involved an unauthorized individual gaining control of CubePilot's cubepilot[.]org domain DNS settings.
New AI security approach analyzes model internals
Offensive-security researchers are presenting a model-agnostic method for activation analysis at Black Hat USA 2026.
US effectively bans foreign-made advanced robots over security concerns
The Federal Communications Commission (FCC) has added foreign-made advanced robotic devices to its Covered List, prohibiting their import due to unacceptable...
Stack Sports notifies users of payment card data exposure
Stack Sports discovered suspicious activity on June 8, 2026, after its internal security monitoring systems detected unauthorized activity affecting the Spor...
Gen Z shows low cybersecurity awareness, Kaspersky study finds
A Kaspersky study of 7,200 respondents across 18 countries highlights that only 27% of Gen Z use mobile antivirus software, and a mere 28% regularly back up ...
CAF Bank suspends online services due to third-party software vulnerability
As outlined in The Register, CAF Bank, which serves approximately 14,000 charities, temporarily suspended its online banking services to address a security v...
University of Pennsylvania breach highlights SSO security risks
As detailed in Bleeping Computer, the University of Pennsylvania experienced a significant data breach in 2025 due to a compromised single sign-on (SSO) acco...
New 'PleaseFix' vulnerabilities expose agentic browsers to widespread attacks
Based on information from Dark Reading, security researchers identified a new class of vulnerabilities, dubbed "PleaseFix," that significantly compromise the...
Tanaka emerges as top data leak broker in first half of 2026
Following insights from The Cyber Express, the cybercrime economy is increasingly valuing stolen data as a significant commodity, with one threat actor, Tana...
OpenWrt releases security updates for critical DHCPv6 flaw and other vulnerabilities
As noted by The Hacker News, OpenWrt released version 24.10.
Model Context Protocol releases major update to AI interaction technology
The latest release of MCP overhauls its request metadata processing, replacing a complex handshake workflow with a stateless protocol core.
JetBrains patches critical TeamCity flaw enabling unauthenticated code execution
JetBrains released security updates for TeamCity On-Premises to address a critical vulnerability, CVE-2026-63077, which carries a CVSS score of 9.8.
vBulletin forum software vulnerable to remote code execution
A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering, posing a ...
Loss of control: The AI agent governance crisis
AI governance is an identity challenge, but legacy identity systems weren't made to handle non-deterministic software.
Seven controls enterprise teams need in place to avoid another OpenAI-Hugging Face incident
Seven controls help enterprises govern AI agents and prevent costly sandbox escapes.
Transparency, The Key To Team Motivation For Remote Workers - Charles Gaudet - BSW #458
Proof-of-concept exploit released for Certighost Windows AD CS vulnerability
Reported by Bleeping Computer. A proof-of-concept exploit was released for a vulnerability in Windows Active Directory Certificate Services (AD CS) known as ...
Arista patches critical command injection flaw in VeloCloud Orchestrator exploited in attacks
As reported by Bleeping Computer, Arista released a patch for a critical command injection vulnerability affecting on-premises VeloCloud Orchestrator (VCO) d...