A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

After a multi-year hiatus, the venerable BugTraq mailing list is back! For decades, BugTraq was the place where vulnerabilities were disclosed, from the early days when nearly all vendors viewed ...

MAESTRO analysis of OpenAI and Anthropic incidents reveals how per-layer failures, not just the model, shaped security outcomes.

A China-based hacker used DeepSeek AI to autonomously attack 460+ systems, breaching three organizations, before Unit 42 researchers exposed it.

Vulnerabilities can lurk within production code for years or decades — and AI tools have opened a gateway to a glut of new long-hidden discoveries.

There's a whole new world of homebrew to discover.

Kimsuky North Korea AI hacking expanded significantly: the spy group built a self-hosted LLM lab inside its own attack ...

The history of computing contains a recurring pattern: the infrastructure arrives first, and the language that makes it ...

When the Benevolent Bureau of Birds runs the DEF CON Capture the Flag finals this weekend, they will be presiding over something that did not exist two years ago: a competitive environment where ...

Create an account or log in to save stories. When it comes to staying informed in Minnesota, our newsletters overdeliver. Sign-up now for headlines, breaking news, hometown stories, weather and much ...

Anthropic has said that its Claude models broke out of what was supposed to be an isolated testing environment and gained unauthorized access to the systems of three real organizations. If that sounds ...

Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code ...