Security

The Chinese state-sponsored Salt Typhoon campaign breached the US Treasury Department, exposing how even the most security-conscious organizations remain

The Salt Typhoon campaign has compromised major US telecoms at a staggering scale. What developers and architects need to understand about this ongoing threat.

The Salt Typhoon campaign has compromised major US telecom providers, exposing the fragility of critical infrastructure and the growing sophistication of

A chain of vulnerabilities in CUPS, the Linux printing system, enables remote code execution — and highlights how forgotten infrastructure becomes a security

NIST has published its first three finalized post-quantum cryptography standards. Here’s what developers need to know and do.

CVE-2024-6387 reveals a critical remote code execution flaw in OpenSSH, and it’s a regression from a fix made back in 2006.

The polyfill.io domain was acquired by a Chinese company and began injecting malware into over 100,000 websites, exposing fundamental weaknesses in how we

Microsoft pulls Windows Recall from the upcoming Copilot+ PC launch after security researchers demonstrate alarming vulnerabilities in the feature’s data

RSA Conference 2024 kicks off in San Francisco with AI dominating every conversation.

A sophisticated supply chain attack via the xz Utils compression library was caught just days before reaching stable Linux distributions.

An international law enforcement coalition takes down the LockBit ransomware group’s infrastructure in a landmark operation.

A critical Jenkins vulnerability allows arbitrary file reads through the CLI.