ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

OpenAI API costs can spiral when agents run wild. Here's how to set spend limits, enable hard caps, and avoid surprise AI ...

We’re accelerating quantum-safe readiness—and sharing what organizations can do now to transition earlier and with confidence ...

KeepSolid CEO Vasyl Ivanov explains how hotel WiFi captive portals evolved into both a security vulnerability and a programmatic ad channel, and what VPN clients should do about it.

Every prompt your team sends to a language model is a potential data-exfiltration event. According to Cyberhaven's 2026 AI ...

When I watch our trade start handing its tests to language models, I don't feel relief. I feel the same itch I get when a release goes too quiet.

With the advent of AI-mediated APIs, the era of manually hard-coding every integration between every microservice may be ...

Update 6/10/26: Added details below from a new ServiceNow advisory regarding the observed activity and bug bounty submissions. ServiceNow is warning about a security incident after attackers exploited ...

Every year, hundreds of thousands of South African learners sit their final matric exams and face the same question the moment results drop: “Now what?” ...

Broadcom rolled out security updates to the Spring and Java ecosystems tied to helping organizations navigate a surge in AI-detected security threats. The updates are through Broadcom’s Tanzu business ...

IBM DataPower Gateway uses crypto certificate objects, crypto key objects, and validation credentials to secure REST API traffic across enterprise environments. The REST Management Interface on port ...

Hadrian is an open-source API security testing framework that detects OWASP API Top 10 vulnerabilities in REST, GraphQL, and gRPC APIs. It uses role-based authorization testing and YAML-driven ...