For many years your common or garden variety penetration tester followed the path of least resistance; just like the average ...

HexMage Magecart attacks 40+ online stores, using blockchain infrastructure to steal shoppers’ card details through malicious ...

Cybercriminals are abusing Ethereum blockchain technology to steal payment-card details from online shoppers. The campaign, ...

CISA advisory AA26-231A is the first U.S. government alert to publicly confirm that AI-generated exploitation scripts are ...

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

CISA's review of vulnerabilities from 2024 and 2025 reveals that the most frequently exploited flaws, often found in the Known Exploited Vulnerability (KEV) catalog, are rooted in long-standing ...

CVE-2026-81421 in sentry-selfhosted-mcp turns a self-hosted Sentry instance into a pivot point for lateral movement. The ...

For a start, HTML has a number of interactive components built in, and there are more of these than you might realize. With a ...

Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access ...

SPECTRE backdoor, deployed by Chinese-speaking hacker group UAT-10147, blinds CrowdStrike Falcon, SentinelOne, and Microsoft ...

A critical flaw (CVSS 9.4) in NASA/JPL's AIT-GUI let anyone send unauthenticated commands to spacecraft instruments.

Discover the top 7 open-source penetration testing tools tailored for DevOps teams in 2026. Enhance security and streamline testing within your Continuous Integration/Continuous Deployment (CI/CD) ...