Content Paint

cybersecurity

New Linux bug a “critical and universal” risk?

CVE-2025-6019 is "trivially exploitable", gives root,

MongoDB open-sources “Kingfisher” secrets scanner

Built on forked and updated “Nosey Parker” and faster than TruffleHog or Gitleaks says security engineer

A man with his head in his hands. CISO burnout is a prevalent mental health issue in cybersecurity

"You read all these scary statistics and it just doesn’t seem to be getting any better."

A bank of microscopes sit on a lab desk. Wiz turned to a small language model to optimise its secret scanning services.

"Instead of relying on LLMs, we can develop focused, efficient solutions."

Patch Tuesday: Another MSHTML zero day exploited

Attackers are going after high-profile targets in the government and defense sectors, with phishing campaigns that use WebDAV and LOLBins to deploy malware

Vicious vishers villainise ventures via… Salesforce?

Little sh*ts use social engineering techniques to get Salesforce extension "Data Loader" installed then plunder material from targets.

Google says a threat group is using its calendar for C2

TOUGHPROGRESS has the capability to read and write events with an attacker-controlled Google Calendar...

New Russian threat actor seen plundering NATO member email accounts

Microsoft Graph API abuse, again...

Hackers spoof IT support's number, spin up Windows 7 VM to launch ransomware attack

MFA "did not protect against the continued use of WMIC and remote PowerShell activity"

Search the site

Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Great! You've successfully signed up.
Great! You've successfully signed up.
Welcome back! You've successfully signed in.
Success! You now have access to additional content.