A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security ...

SonarQube Hunter Agent uses AI to detect broken access control, business logic flaws, and authentication vulnerabilities traditional SAST can miss.

Attacks were observed on Red Hat, MS SQL, Ajax.NET, Linux, Citrix NetScaler, and Gitea. Admins should update quickly.

CISA adds six exploited flaws to KEV, including a NetScaler bug tied to web shells and 36 exploitation attempts in 12 days.

AI-powered PLC attacks, GitLab exploits, npm backdoors, cloud leaks, auth abuse, and payment fraud lead this week’s ...

Microsoft documents 18 partly critical security vulnerabilities in cloud products that developers have closed.

A ransomware affiliate weaponized Claude Code to autonomously steal LDAP credentials, backdoor VPNs, and exfiltrate SQL ...

There’s so much going on in the Fabric community that it can be hard to keep up with it all. Semantic Link Labs is a great example: in the six months or so since I last had a proper look at it my ...

Microsoft has released fresh security patches to resolve critical vulnerabilities in Azure, Entra ID, Exchange, and Fabric.

A newly identified ValleyRAT campaign is targeting organizations in India by abusing a legitimately signed Windows application to launch malware while disguising the attack as an official tax notice.

New agent picker lets Azure administrators invoke purpose-built agents for migration, deployment and optimization tasks without relying on Copilot to select one automatically.

James Bennett of Liquibase walks through a live demo of targeted rollback, undoing one bad database change without a full restore or risky fix forward.