Latest security news

SANS Institute says governance programs are still nascent even as AI failures and threats grow

Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine

Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threat

The US Department of Defense announced the immediate suspension of the CMMC Phase II requirements until further review

Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including AWS Govcloud keys -- in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency's initial response provide important lessons that all security teams should absorb.

Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller

CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository

NHS tells staff they could face prison for “inappropriate” access to patients’ medical records

Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests