CISA warns of active attacks exploiting Android, Linux bugs
…about the flaw or the incidents. The issue has been addressed with the release of June 2026 security patches (2026-06-01 and 2026-06-05 security patch levels). The second vulnerability…
Search
All sources
bleepingcomputer.com
39
techcrunch.com
12
theregister.com
5
theverge.com
5
docker.com
4
github.blog
4
blog.cloudflare.com
4
engadget.com
3
wired.com
3
techradar.com
3
phoronix.com
2
appleinsider.com
2
Videos
More videosTop stories
Signal adds security warnings for social engineering, phishing attacks
Signal adds security warnings for social engineering, phishing attacks By Bill Toulas May 12, 2026 03:40 PM Signal has introduced new in-app confirmations and warning messages as additional safeguards against…
AI agents create new risks requiring continuous monitoring and oversight
…As a result, Meta gave the incident a “Sev 1” rating, the second-highest incident response identifier used internally. This incident came hot on the heels of another example of an AI…
Investigating unauthorized access to GitHub-owned repositories
…Written by Alexis Wales is the Chief Information Security Officer of GitHub. She leads a team of security experts focused on safeguarding the GitHub platform, products and the open source community, empowering…
Discussions and forums
DevSecOps Roadmap
I’m working toward a DevSecOps role and put together this roadmap to guide my learning across cloud, security, automation, and CI/CD. Trying to be intentional about building real-world skills and projects along the way—w…
What a bunch of idiots... Canvas
https://www.reddit.com/r/canvas/comments/1taj9mk/instructure_just_confirmed_they_paid_the_ransom/ "We received assurances that it will not be further shared on the dark web or elsewhere, and we received proof that any co…
Genuinely hate cyber security teams
After working as a platform engineer for almost half a decade, one thing I developed is a strong hatred for cyber sec teams. I'm not sure if it's just me, but in every place I work they are seen by the business as the gu…
Tell HN: Compliance is not equal to Security
For over a decade, I’ve been doing bug bounty, security audits, and security consulting. And if there’s one thing I’ve seen repeatedly, it’s this:Most startups call a security engineer or hire a security agency only when…
1
1
Show HN: Ccgs – Collaborative Claude Code sessions, stored in Git branches
My team uses Claude Code daily, and the sessions have become some of the most useful artifacts we produce. But they're trapped in ~/.claude/projects/ on whichever laptop they happened on. There's no good way to hand a co…
6
2
Voice phishing skyrockets as smooth crims talk their way in
…Remember Brickstorm? Mandiant investigated "numerous" incidents in 2025 in which a suspected Chinese government spy crew tracked as UNC6201 broke into edge devices that didn't support endpoint security products, deployed a…
Canvas Hack Aftermath: Congress Wants Instructure to Answer Questions
…alongside the Cybersecurity and Infrastructure Security Agency. CISA has been working with Instructure as one of the "outside forensics experts" the company refers to in its incident FAQs , helping to "contain the…
Malicious VS Code Extension Linked to Theft of 3,800 GitHub Repositories
A reported software supply chain attack involving a malicious Visual Studio Code extension has exposed the growing security risks surrounding modern development environments. According to published reports, a hacker group known as…
French govt messaging service breached in account hijacking attack
…to the secure instant messaging platform using a compromised user account. The French digital affairs directorate has also alerted France's data protection authority, the CNIL, to the incident due to the…
Delivering Lifecycle Control for AI Infrastructure at Scale with NVIDIA DGX Spark Enterprise Manageability | NVIDIA Technical Blog
…The framework covers the full operational lifecycleincluding procurement, provisioning, monitoring, maintenance, incident response, and endoflifewhile supporting both internetconnected and fully airgapped deployments with tools for diagnostics, security auditing, and coordinated update management…
Amazon insists AI coding isn't source of outages
…access controls – not AI." In the wake of that February incident, an Amazon spokesperson told The Register that "While security incidents involving misconfigured access controls can occur with any developer tool – AI…