GitLab Path Traversal Vulnerability Added to CISA Known Exploited Vulnerabilities Catalogue
An unauthenticated file-read flaw in GitLab's repository commits API has drawn a mandatory remediation deadline…
Month: September 2026
When AI Becomes the Attacker: Schneier’s DEF CON Address on Autonomous Hacking
Security veteran Bruce Schneier used DEF CON to lay out what the security industry needs…
AI-Orchestrated PaperCut Campaign Compromised 395 Organisations in 48 Countries
A likely Russian-speaking attacker deployed hundreds of AI agents to exploit freshly patched PaperCut vulnerabilities…
Anthropic Report: AI Has Erased the Skill Gap Between State Actors and Lone Criminals
A threat report covering eight months of Claude misuse finds that AI-assisted campaigns once requiring…
San Francisco Demands Meta Explain How Child Exploitation Ads Ran on Facebook and Instagram
A city attorney's order puts Meta's ad moderation practices under formal scrutiny, raising platform governance…
WatchGuard Firebox RCE Vulnerability Now Linked to Ransomware Campaigns
CISA has confirmed that ransomware operators are actively exploiting a critical remote code execution flaw…
BlueMoon Exploit Kit Chains Three Vulnerabilities, Shared Across Four Espionage Groups Within Days
A newly discovered exploit kit targeting Chromium browsers and Windows is being rapidly distributed among…
Veradigm discloses patient data breach tied to third-party ransomware attack
A cybersecurity incident at an unnamed vendor has exposed patient personal data held by healthcare…
From Compliance Checkbox to Continuous Validation: Rethinking Federal Cyber Defence
Static vulnerability scores and annual penetration tests are no match for adversaries who exploit misconfigurations…
Microsoft’s September Patch Tuesday Tops 974 Vulnerabilities, Shattering Its Own Record
AI-assisted vulnerability discovery is accelerating Microsoft's patch volumes to levels that are straining enterprise patch…