Cybersecurity

NIST has published its first three finalized post-quantum cryptography standards. Here’s what developers need to know and do.

A faulty CrowdStrike Falcon sensor update has caused one of the largest IT outages in history, bricking millions of Windows machines worldwide.

CVE-2024-6387 reveals a critical remote code execution flaw in OpenSSH, and it’s a regression from a fix made back in 2006.

The polyfill.io domain was acquired by a Chinese company and began injecting malware into over 100,000 websites, exposing fundamental weaknesses in how we

Microsoft pulls Windows Recall from the upcoming Copilot+ PC launch after security researchers demonstrate alarming vulnerabilities in the feature’s data

RSA Conference 2024 kicks off in San Francisco with AI dominating every conversation.

A sophisticated supply chain attack via the xz Utils compression library was caught just days before reaching stable Linux distributions.

An international law enforcement coalition takes down the LockBit ransomware group’s infrastructure in a landmark operation.

A critical Jenkins vulnerability allows arbitrary file reads through the CLI.

Researchers disclose the Terrapin attack against SSH, demonstrating that even our most trusted protocols can harbor subtle cryptographic weaknesses.

The LockBit ransomware attack on ICBC’s US operations disrupted Treasury market trading and exposed critical vulnerabilities in financial infrastructure.

CVE-2023-44487 exploits a fundamental aspect of HTTP/2 to enable record-breaking DDoS attacks. Here’s what you need to know and do.