Qilin Ransomware Administrator Identified Through a Decade of Operational Security Failures
Cyber intelligence firms have linked the leader of the world's most active ransomware affiliate program…
Month: November 2026
Turla’s Cereal Toolset Turns Exchange Servers Into Silent Collection Points
A newly identified Russian espionage toolkit hijacks victims' own Microsoft Exchange infrastructure to gather intelligence,…
OpenSSH and musl flaw lets attackers bypass password authentication with an oversized string
A decade-old vulnerability in OpenSSH paired with the musl C library allows login to affected…
Google Patches Eighth Actively Exploited Chrome Zero-Day of 2026
A use-after-free flaw in Chrome's XML component is being exploited in the wild, marking the…
Google DeepMind Uses AI to Formally Verify Signal’s Cryptographic Implementation
A human-AI collaboration framework has completed the first machine-code-level formal verification of Signal's post-quantum handshake…
Anthropic Releases Claude Fable 5.2 and Mythos 5.2 as Enterprise AI Integrations Expand
New model releases bring a price reduction and improved reasoning, but a token-exhaustion bug resurfaces…
Compromised Qubole AWS Credentials Used to Raid Customer Cloud Environments
Attackers leveraged stolen IAM credentials tied to data platform Qubole to assume cross-account roles and…
AI Security Has Three Distinct Domains — and the Industry Needs to Work on All of Them
A recent San Francisco conference highlighted a useful framework for thinking about AI security that…
Microsoft ships 470-plus CVE fixes in a single Azure Linux update
A sprawling patch release for Azure Linux 3.0.2022 addresses hundreds of vulnerabilities across the kernel,…
NIST Releases Cybersecurity Guidance for Solo Business Operators
New NIST guidance targets less-technical sole traders, though questions remain about its coverage of unsupervised…