Policy, regulation and governance changes that alter the security landscape.
Government action, regulation, standards, privacy rules and governance decisions with direct implications for security teams.
Twelve AI deepfake sites were taken offline this week after a New York district attorney seized their domain names for violating laws around disseminating non-consensual videos.
The Record · 1h ago · 1 sourceRead the full story →
Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter vulnerability patched in July.
BleepingComputer · 2h ago
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data.
The Hacker News · 3h agoCisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks.
BleepingComputer · 6h ago
A newly disclosed Nintendo Switch vulnerability is pushing owners of the original console toward an urgent firmware update, particularly those who tend to play in public spaces.
The Cyber Express · 7h ago
A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-hosting server, cPanel warned in an advisory published on September 14.
The Hacker News · 7h ago
A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor called GRIMWEDGE.
The Hacker News · 8h ago
CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition instances.
Dark Reading · 17h ago
A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12.
The Hacker News · 20h ago
Cybercriminals have created hundreds of fake government and news websites to target people in Uzbekistan, Belarus and Tajikistan with bogus offers promising cash payments or passive income.
The Record · 22h ago
The company unintentionally disclosed users’ information to a third party impersonating a government agency.
SecurityWeek · 1d ago
We designed a behavioral clustering model to map cloud identity roles from audit logs, enabling continuous threat detection using standard SQL queries.
Palo Alto Unit 42 · 1d ago
Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog,…
The Hacker News · 2d ago