Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets
Trivy, a popular open-source vulnerability scanner maintained by Aqua Security, was compromised a second time within the span of a...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure
A critical security flaw impacting Langflow has come under active exploitation within 20 hours of public disclosure, highlighting the speed...
Apple Mail’s ‘Trusted Sender’ Label Misused in New Phishing Scheme
Image: Generated via Google’s Nano Banana A new phishing scam is raising concerns after reports showed that Apple Mail can...
6 Best Open Source Password Managers for Windows in 2026
This guide is for Windows users who prefer open-source solutions and want a clear, practical overview of the best open-source...
Chainguard Assemble 2026 and the Security Factory Mindset
New York knows how to turn rough ground into something human-friendly. For example, the Liz Christy Garden began in...
BSidesSLC 2025 – Getting Things Fixed – Keynote On Security Wins (And Fails)
Author, Creator & Presenter: Scott Piper – Principal Cloud Security Researcher at Wiz Our thanks to BSidesSLC for publishing...
That “job brief” on Google Forms could infect your device
We’ve identified a campaign using business-related lures, such as job interviews, project briefs, and financial document, to distribute malware,...
Inside AutoSecT: How AI Agents Are Transforming Software Composition Analysis
Most SCA tools do one thing: they tell you when something’s vulnerable. AutoSecT has expanded its scope by incorporating...
Apple urges iPhone users to update as Coruna and DarkSword exploit kits emerge
Apple urges iPhone users to update as Coruna and DarkSword exploit kits emerge Pierluigi Paganini March 20, 2026 Apple warns...
Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operators
Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operators Pierluigi Paganini March 20, 2026 DoJ disrupted IoT botnets’ C2...
GUEST ESSAY: Executives trust AI security even as security teams confront blind spots, new risks
By Daniel Bardenstein In our recent report, Beyond the Black Box, we found a striking gap: 80% of executives...
Securing Third-Party Procurement Platforms with Enterprise SSO
Introduction Procurement is no longer a back-office function handled through spreadsheets and manual approvals. Modern enterprise teams depend on...
Securing E-commerce Transactions with Modern Authentication
Image Source: Pexels How many packages has your business lost during shipping? If you don’t have shipping insurance, any...
Google Adds 24-Hour Wait for Unverified App Sideloading to Reduce Malware and Scams
Ravie LakshmananMar 20, 2026Data Privacy / Mobile Security Google on Thursday announced a new "advanced flow" for Android sideloading that...
The Importance of Behavioral Analytics in AI-Enabled Cyber Attacks
The Hacker NewsMar 20, 2026Artificial Intelligence / Data Protection Artificial Intelligence (AI) is changing how individuals and organizations conduct many...