Center for Democracy & Technology and independent security experts urged the committee to build system and contract requirements for authenticated updates, data integrity, append‑only logs, and clear vulnerability disclosure, testing and remediation processes rather than treating security as a one‑time purchase.

Vulnerabilities in open source software developed and used by NASA could be exploited to breach their systems, a security researcher claims.

Claude Mythos identified thousands of high- and critical-severity vulnerabilities, Anthropic revealed in a Project Glasswing update.

GNOME shortens its security disclosure deadline to 30 days as AI-generated vulnerability reports climb. One longtime maintainer steps back.

Linux kernel developers are reviewing a proposal for an emergency "killswitch" for disabling vulnerable kernel functions at runtime.

Security researchers uncovered 37 previously unknown vulnerabilities on the opening day of Pwn2Own Automotive 2026.

Serious vulnerabilities in two Ruckus Networks products may allow attackers to compromise the environments managed by the affected software.

A prominent cryptographer banned from Rust channels after clashing with maintainers over bug disclosure, raising governance questions.

New details emerge about Chinese hackers breaching the US Treasury Department. The Supreme Court considers the TikTok ban. Chinese hackers exploit a zero-day flaw in Ivanti Connect Secure VPN. A new credit...

CVE-2026-14258 highlights a vulnerability in dhcpcd that could compromise system stability. Experts debate appropriate response measures and ethical

Bon matin ☕ Pour bien débuter ce vendredi, voici votre dose "cyber à bas bruit" 😊 Pour rappel, cette petite infolettre gratuite est ma pierre à l'édifice de l'information de qualité. Bonne lecture ! C...

Alan Monie found that Shelly Gen 4 smart switches keep their default, open Wi-Fi access point enabled even after you join them to your home network. Anyone nearby can connect and trigger whatever the ...

Microsoft has acknowledged the elevation of privilege Microsoft Defender bug (CVE-2026-50656) triggered via the "RoguePlanet" exploit.

Microsoft’s dispute with security researcher Nightmare Eclipse over the public disclosure of zero-day vulnerabilities has reignited debate about coordinated vulnerability disclosure and the trust gap between vendors and researchers. The controversy also highlights how delayed patching, public threats, and escalating tensions can increase risk for customers and weaken the security community’s willingness to report flaws. #Microsoft #NightmareEclipse #RedSun #UnDefend #BlueHammer #YellowKey #GreenPlasma #MiniPlasma #VSCode

Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an unauthenticated remote attacker to run code, but only "under specific conditions" that it has not described. One flaw affects Check Point's Security Gateways, its firewall appliances. The other affects those gateways and the Security

Vulnerability patch cycles come under rising pressure as disclosures double and attackers move faster to exploit exposed systems online.

CISA and allied cyber authorities published a guide telling software vendors how to build a coordinated vulnerability disclosure program.

Microsoft has finally released a fix for CVE-2026-50656, the Windows Defender LPE vulnerability triggered by the RoguePlanet exploit.

New tool simplifies vulnerability disclosure process, aligning with industry standards for enhanced web security practices.