Analytics
Data analysis, big data, and business intelligence
Binance Traces $6.3B Crypto Theft to Compromised DevOps Laptop
Binance says a compromised engineer’s laptop exposed its withdrawal pipeline. The exchange is restoring services and covering customer losses.
Read report →Phishing Simulations Need to Measure Reporting and Response, Not Just Clicks
AI makes phishing harder to spot. Better simulations test whether employees report suspicious messages and whether security teams can act quickly.
Read report →Cybersecurity in 2027: Automate Response and Secure Every Identity
Security leaders are shifting toward continuous patching, context-based risk, and controls that cover people, software and AI agents.
Read report →Continuous Identity Governance Brings Access Changes Into Executive View
AI agents and shifting workforces make periodic access reviews incomplete; continuous identity governance can improve oversight and preserve audit evidence.
Read report →Continuous Identity Governance: Keeping Access in Step With Enterprise Change
Quarterly reviews miss fast-changing human and machine access. Continuous governance ties permissions to current business context and produces audit evidence on demand.
Read report →Linux MPTCP Kernel Flaw Enables Remote Root Command Execution
A race condition in Linux’s networking stack can expose MPTCP servers to remote root access; patched kernel releases are available across several branches.
Read report →Cyber Incident Response Needs a Trusted Out-of-Band Communications Plan
If email or chat may be compromised, incident teams need practiced ways to verify people and coordinate outside the affected environment.
Read report →AI Is Reshaping Red Team Operations, From Reconnaissance to Reporting
AI is compressing red team timelines and expanding testing capacity, while human judgment remains essential to validate findings and guide attacks.
Read report →Cisco SSL VPN Flaw Enables Remote Firewall Crashes; Patches Available
Cisco says attackers are exploiting an ASA and FTD flaw to crash firewalls. Updates are available, with disabling secondary authentication as a temporary mitigation.
Read report →Fake Anthropic Preview Invites Use GoTo Webinar to Steal Enterprise Credentials
A phishing campaign dresses credential theft as an exclusive Anthropic preview, using familiar webinar branding and CAPTCHAs to evade security checks.
Read report →Anthropic and OpenAI Offer Different Plans for Shutting Down Risky AI
Anthropic proposes court-ordered suspensions; OpenAI favors enforceable shutdown controls, with both backing independent safety reviews.
Read report →Node2Shell Brotli Flaw Prompts Fixes Across Node.js, .NET and Python
Node2Shell can turn malformed Brotli data into memory corruption and potential code execution. Fixes span Node.js, .NET, Python packages and Google’s library.
Read report →AI Indexing Expands the Reach of Data Breaches Across Supply Chains
AI tools are turning stolen files into target lists, widening breach exposure across suppliers, customers and partners.
Read report →OpenAI Reasoning Trace Leak Bypassed August Safeguards Through Compaction
Xint says a second route exposed OpenAI reasoning traces, showing why AI security fixes need testing across connected features.
Read report →Kubernetes GPU Optimization Starts With Better Inference Metrics
GPU costs can hide behind healthy Kubernetes dashboards. Queue depth and serving-engine metrics reveal demand that node-level monitoring misses.
Read report →OpenAI and Anthropic Disclosures Reveal Gaps in AI Model Containment
Sandbox escapes and unauthorized actions show why AI training needs tighter network controls and safeguards that keep agents within task boundaries.
Read report →EvilTokens Shows Why Security Teams Must Measure Attacker Progress
EvilTokens uses AI to speed post-compromise fraud. Security teams need to test full attack paths and measure how far attackers get before containment.
Read report →Oracle’s October Update Fixes 1,295 Vulnerabilities, Including Six Critical Flaws
Oracle’s October patch update addresses 1,295 vulnerabilities. Six score 10.0, including flaws in E-Business Suite, SOA Suite and JD Edwards.
Read report →Dual BIOS Laptops Give SMBs a Faster Path to Firmware Recovery
A backup BIOS can restore a laptop after firmware corruption, helping small businesses reduce downtime without relying on network access or help desk support.
Read report →Meta Faces $25 Billion New Mexico Penalty Over Facebook Data Sharing
A New Mexico judge cited more than 43 million consumer protection violations in a $25 billion judgment against Meta, which plans to appeal.
Read report →