GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format…
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only…
Read More
When building an AI-native security program, start with outcomes
In my last article, I described the SOC Triangle, the longstanding trade-off among quality, consistency and cost efficiency in security operations. AI is starting to loosen that constraint by enabling…
Read More
Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel…
Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest…
Read More
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in…
Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. "CVE-2026-107406…
Read More
FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in…
The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax…
Read More
'AgentCorruption' Puts AWS Environments at Risk With Single Prompt
A now-patched vulnerability in AWS Bedrock AgentCore could have allowed an attacker to use one AI chatbot to take over an organization's entire fleet.
Read More
Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
The first cybercriminal to ever make the FBI's "10 Most Wanted Fugitives" list allegedly infused Tren de Aragua's violent criminal operations with cash.
Read More
Growing PQC at the edge belies deeper quantum-readiness challenges
The quantum threat is becoming an increasing concern for security leaders, but many may be mistaking protection at their website’s front door for quantum readiness across their business. More than…
Read MoreAI Governance Belongs in Your Pipeline, Not in Spreadsheets
Every engineering team scaling AI systems in enterprise software eventually hits the same roadblock. On one side, developers are deploying retrieval-augmented generation (RAG) pipelines and LLM microservices. On the other…
Read More