AI dev tools
Does AI Coding Make Secrets Sprawl Worse in CI/CD Pipelines?
Artificial intelligence (AI)-powered coding assistants help software development teams work faster by generating code, configuring systems and automating repetitive tasks.
Silicon Insights
- Security
Operation Endgame malware takedown turns up over 6 million stolen logins
- Security
SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths
- Security
Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
- AI dev tools
Kazakhstan-linked hackers used AI agent to spy on Central Asian governments
Security
4 of the latest
AI dev tools
4 of the latest
Cloud
4 of the latest
More stories
Security
European authorities take down SteaIC malware servers for second time this year
European police dismantled more than 100 servers used by the StealC password-stealing malware this week, marking the second such takedown after an initial crackdown in June.
Security
ConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizations
IT management software company ConnectWise said it is investigating reports of unauthorized access to its customers following reports from multiple cybersecurity firms that almost 50 organizations had been breached through the company’s ScreenConnect tool.
Security
New Windows SignDrop zero-day gives hackers SYSTEM privileges
Security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) has released a new Windows zero-day exploit that can let attackers gain SYSTEM privileges.
Security
Citrix patches NetScaler, Secure Access Client for DoS, authentication bypass flaws
Patches have been issued by Citrix to address several significant security weaknesses present in NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console, which possess the potential to cause…
Security
Humble Bundle security compromised via vibecoding vulnerability
Humble Bundle has fundamentally compromised much of its security infrastructure by implementing "vibecoding."
Security
Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
Europol and law enforcement partners from nine countries have seized hundreds of servers and domains used by the Gootloader, CastleRAT, and StealC malware operations.
Security
Your Endpoint Management Platform Could Be Your Biggest Security Risk
Author: Gene Moody, Field CTO at Action1 Endpoint management platforms have become essential in modern IT operations and enterprise security.
Security
The death of the 14-day patch: Surviving machine-speed vulnerability discovery
For decades, enterprise vulnerability management ran on human time: A security researcher manually dissected a binary, traced execution paths, built a proof of concept, and filed a coordinated disclosure.
Security
Microsoft Exchange Server 2016 and 2019 enter their 'permanently vulnerable' era
Microsoft has warned customers still clinging to Exchange Server 2016 and 2019 to consider the software "permanently vulnerable" as November's security fixes arrive for Subscription Edition (SE) alone.
Security
Hijacked email accounts complicate investigations into European bomb hoaxes
Editor's note: This article was updated with comment from Abnormal Security at 10:15 a.m.