Google Holds Back Gemini 3.5 Flash Cyber as CodeMender Enters Preview
Google has built a cybersecurity model capable of finding vulnerabilities, checking whether they can be exploited, and generating patches. Most...
vulnerabilities
Hackers Already Exploiting Newly Patched WordPress Flaws, Researchers Warn
Hackers are already exploiting two newly patched WordPress vulnerabilities, exposing millions of websites that have yet to install the latest...
Microsoft Urges Windows 11 Users to Install Updates Within Three Days
Microsoft warns attackers are increasingly using AI to accelerate exploitation of newly disclosed vulnerabilities, shrinking the time organizations have to...
Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands
Ravie LakshmananJul 15, 2026Vulnerability / Enterprise Security SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile...
SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data
Ravie LakshmananJul 14, 2026Enterprise Security / Vulnerability SAP has rolled out updates to address multiple vulnerabilities as part of its...
Vulnerability in FIFA’s Network
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...
Friday Squid Blogging: “Squidbleed” Vulnerability
Friday Squid Blogging: “Squidbleed” Vulnerability In a rare combined cybersecurity/squid post, a twenty-nine-year-old squid proxy bug can leak HTTP requests....
Felons, Fraudsters Flog Offensive Cybersecurity Startup
A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair...
Apple signals that the new attack surface is time itself
The logic is simple. If an AI system can find a flaw for one user, it can identify vulnerabilities for other...
Update Chrome Now: Google Fixes 18 Security Flaws, Including Critical Bugs
Eighteen bugs, four of them critical, and one browser update stand between your computer and a bad time. Google pushed...
Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild – Patch Now
Ravie LakshmananJun 09, 2026Vulnerability / Browser Security Google has released security updates to address 74 vulnerabilities, including one that has...
U.S. CISA adds SolarWinds Serv-U flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds SolarWinds Serv-U flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 06, 2026 U.S. Cybersecurity and...
U.S. CISA adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 03, 2026 U.S. Cybersecurity...
U.S. CISA adds Oracle WebLogic flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Oracle WebLogic flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 02, 2026 U.S. Cybersecurity and...
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
Ravie LakshmananJun 02, 2026Vulnerability / Mobile Security Google on Monday released patches for 124 security vulnerabilities impacting its Android operating...
