The best podcast episodes on the biggest breaches were recorded close to the event, often by people who worked on it. My picks: Malicious Life on SolarWinds, Darknet Diaries on NotPetya, Andres Freund ...

These days, there isn't a day that goes by without news of unauthorized access. I am also a victim who was affected by the ...

Horizon3.ai researchers used Anthropic's Mythos model to find a cryptographic weakness in Rejetto HTTP File Server (HFS), tracked as CVE-2026-61500. The flaw lets an unauthenticated attacker forge ...

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of ...

Authorizer, an open-source authentication server, lets AI assistants check users' permissions before they search company ...

The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before ...

This Java app will give you with a quick and easy way to set up a Web application in Java using OAuth2. The sample included in the download is designed to run on any platform and tested with Java 8.

Check Point fixed CVE-2026-91843, a critical bug that could let attackers run code as root on Security Management and Log Servers ...

CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.4, which adds support for Go 1.27, ...

Java idiomatic client for Cloud Spanner. The client application making API calls must be granted authorization scopes required for the desired Cloud Spanner APIs, and the authenticated principal must ...

A new threat intelligence report from Gambit Security has documented one of the clearest real-world examples yet of artificial intelligence being weaponized inside an active ransomware campaign.