CVE-2025-54988 is a weakness in the tika-parser-pdf-module used to process PDFs in Apache Tika from version 1.13 to and ...

Chasing the cheapest vendors feels great — until a breach wipes out the “savings”; real wins come when procurement bakes ...

AI browsers including Perplexity Comet and OpenAI’s ChatGPT Atlas present security risks that cannot be adequately mitigated, ...

A growing percentage of CISOs see OffSec as a must-have for improving their overall security posture — especially as AI cyber ...

Raphael Reiß, CISO at EU HVAC giant Vaillant Group, explains what cyber challenges his industry faces, including how to ...

It has been seen spreading cryptojacking malware and in attempts to steal cloud credentials from compromised machines.

The Signalgate scandal that enveloped US Secretary of Defense Pete Hegseth in March appears to be symptomatic of a wider lax ...

CISA and the NSA warn that Chinese state-sponsored attackers are deploying malware dubbed BRICKSTORM on VMware servers to ...

Modern attacks hit the browser first, so zero trust flips the script — verify identity, check the device and lock down each ...

Malicious content in issues or pull requests can trick AI agents in CI/CD workflows into running privileged commands in an ...

AI is moving fast, but without early guardrails, it’ll cause the same messy debt we faced with cloud and APIs.

That vulnerability, tracked as CVE-2025-55182, enables attackers to remotely execute code on web servers running the React 19 ...