Newsroom
Independent, source-checked, and written for the people who have to respond.
Barracuda's survey of 2,000 IT and security decision-makers finds 94% report skills gaps, and AI-related risks top the list of challenges even as 79% say AI is already affecting security roles.
Top headlines
A China-linked espionage campaign used a new UEFI bootkit, BlackX, against diplomatic organizations in Central Asia…
CISA has added two critical, actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: a command…
An evaluation by METR and Redwood Research found OpenAI's internal misalignment monitoring could be sidestepped by…
A high-severity out-of-bounds write in the Brotli decoder bundled with Node.js has been shown to allow…
The White Paper would replace the Submarine Telegraph Act 1885, create a new "security compromise" offence…
Latest
The lab giant detected unauthorized access to its Quanum Lab Services Manager platform on October 21 and confirmed…
Railway said an unauthorized third party may have accessed encrypted customer environment variables and, in some cases, decrypted…
A bipartisan House bill from Reps. Pat Harrigan and George Whitesides would have NIST define distillation attacks, write…
The new capability, announced at OneCon 2026 and available in early access, inventories and polices AI agents across…
Eight eMudhra intermediate certificate authority keys generated with almost no randomness could be recovered instantly from their public…
GitLab shipped emergency fixes on October 21 for an integer overflow in its CI/CD regular expression compiler that…
CVE-2026-109618 and CVE-2026-109619, both rated 9.2, allow unauthenticated command execution through a single HTTP request against servers running…
TeamUpdraft says exposed cloud connection keys were revoked in UpdraftPlus 1.26.13/2.26.13, but Nethemba found the fix misses keys…
Plex warns that any internet-facing Plex Media Server below build 1.43.3.10861 should be treated as at risk, as…
MapQuest's new mobile app layer marks crowdsourced locations of license plate readers from Flock and other vendors, sourced…
A default-on Android setting attaches a handset's verified phone number to every Google account on the device, including…
CVE-2026-110936 (CVSS 8.4) lets attackers pair a signed Siemens binary with malicious DLLs. A fix in version 4.0.9.8…
From the archive
The Morning Patch
One plain-text email each weekday at 05:00 UTC: what broke overnight, who is affected, and what to patch first. No tracking pixels, no sponsored slots.
Free · Unsubscribe in one click