Patched VMware vCenter bug targeted in ransomware campaigns
Ransomware groups exploit a critical VMware vCenter bug just seven weeks after patch released.
SC Media
20 articles
Oktane Video Player 2026
Mass scanning campaign targets Vite development servers for cloud credentials
The operation utilizes an exploit for CVE-2026-39364, a critical flaw affecting Vite versions 7.1.
Nintendo patches critical Nintendo Switch vulnerability
The vulnerability, identified as CVE-2026-82079, affects Switch systems running firmware versions prior to 23.0.
OpenAI’s Astra restrictions are another warning shot for security teams
Here are five ways teams can stay resilient as adversaries gain access to frontier AI models.
DDRop attack bypasses Intel and AMD confidential computing defenses
The DDRop attack requires an adversary with existing software control of a server and brief physical access to install a custom interposer circuit board betw...
Dataminr and Crisis24 integrate AI threat detection into risk management platform
The integration embeds Dataminr's Multi-Modal Fusion AI into Horizon, processing text in 150 languages, along with image, video, audio, and sensor data from ...
Malicious Twitch browser extension leaks OAuth tokens for nearly 31,000 users
The extension, named "Twitch Enhanced Viewer | JeetBot," was available on both the Google Chrome Web Store and Mozilla Firefox Add-Ons store, with approximat...
Homebrew 7.0.0 released with built-in vulnerability scanner and improved security
Homebrew, widely used on macOS, is frequently targeted by threat actors to distribute info-stealer malware.
Microsoft warns of cloud storage attacks, financial fraud scams targeting customers
Both campaigns use social engineering to access accounts or secure fraudulent transactions.
The AI Threat Multiplier: Securing Mobile Apps in the Automated Era - Ryan Lloyd, Jason Cortlund - ASW #400
Trump pushes back on Anthropic CEO's call for an AI slowdown
Trump rejects calls to slow frontier AI as security experts debate the risks and need for guardrails.
Total AI awareness: Gaining full visibility of the AI attack surface
Why protecting AI piecemeal leads to coverage gaps and unnecessary risk.
AI has outpaced the patching clock – here’s what the industry needs to do
Five ways the industry can respond to the AI challenge.
Beyond the CVE Count: The Real State of Vulnerability Management - Charles Loring - CSP #228
Synthetic 'digital Frankenstein' identities sold on dark web for $200
Researchers from Coveron and NordLayer Intelligence have observed a significant surge in the creation and sale of these synthetic identities on dark web foru...
Logitech Options+ vulnerability allows SYSTEM-level privilege escalation
The vulnerability was found in the software's updater service, which runs with extensive operating system access.
UK government rolls out passkeys to over 23 million users
The GOV.UK One Login system is now more widely adopting passkeys, following a successful trial with over 300,000 users.
Cyber warfare market projected to double by 2031 amid rising threats
The projected surge is attributed to several factors, including escalating attacks on military networks and mission systems, forcing defense organizations to...
Kiteworks acquires AI data security firm Bonfy.AI
The acquisition, with an undisclosed cost estimated in the tens of millions of dollars, integrates Bonfy.AI's AI-native content-security platform into Kitewo...