Threats

A September 23 webinar from BleepingComputer and Material Security examines real Google Workspace breaches and the response decisions that shaped their outcomes

Schneier's DEF CON talk on AI hacking drew over 100K YouTube views. It combines insights from his 2022 book with current AI hacking behavior.

A new cPanel flaw lets an authenticated hosting account achieve root-level code execution via SQL injection in EmailTrack. All supported versions are affected.

A new Shai-Hulud variant scans 469 locations for developer credentials, up from 189. Securing the credential layer is now the core supply chain defense priority

Novocure disclosed a mid-August cyberattack exposing over 1,400 U.S. patient records and employee contact data. No medical devices were accessed.

Intel, Nvidia, and IBM are embedding post-quantum cryptography into hardware. Enterprises are urged to act now against harvest-now, decrypt-later attacks.

Bruce Schneier has several public speaking engagements scheduled for fall 2026, spanning security conferences, festivals, and civic events across North America.

A compelling video explores deep-sea search techniques, showing how red light and bait reveal more about giant and colossal squid than traditional methods.

AI models are discovering software vulnerabilities at unprecedented scale. Could this surge eventually lead to safer, near-flaw-free software?

AI tutoring tools are growing fast, but quality and safeguards vary widely. Parents should understand the privacy, security, and developmental risks involved.

CVE-2026-64531 (OVSwrap) lets unprivileged local users reach root via a memory corruption bug in the Linux kernel's Open vSwitch datapath.

GitHub has added a 72-hour Dependabot cooldown, while PyPI now blocks new files added to releases older than 14 days.