Cybersecurity
General cybersecurity news and analysis
Part Four of The Kryptos Sculpture: Exclusive Best Evidence
Who owns the answer to Kryptos’s long-unsolved fourth passage—the artist, the researchers who found it in Sanborn’s Smithsonian archives, or the private buyer poised to lock it away? Two teams say they recovered K4’s plaintext from Sanborn’s papers and proof plates now headed to auction, sparking legal threats and a tense standoff between discovery and public access.
Serious F5 Breach: Exclusive Devastating Impact Revealed
Our exclusive look at the F5 breach reveals the widespread fallout and practical steps you can take now to shore up your defenses.
Serious F5 Breach Exclusive: Critical Security Fallout
If you rely on BIG‑IP appliances, take notice: F5 says a sophisticated, likely nation‑state threat actor maintained covert, long‑term access to the systems that build and push updates — potentially turning a trusted update channel into a vector for widespread compromise.
Failures in Face Recognition: Stunning, Dangerous Gaps
When face recognition systems meant to speed and secure our lives misidentify people with facial differences, the result is more than inconvenience — it can lock people out of banks, services, and dignity. High lab scores hide a harsher reality: algorithms trained on ideal photos fail in real-world lighting, angles, and diversity, turning smart tech into a barrier for many.
Failures in Face Recognition: Stunning, Dangerous Flaws
Think face recognition is foolproof? The startling, often dangerous failures of these systems expose privacy, security, and fairness risks we can’t ignore.
Failures in Face Recognition: Stunning Risks
Face recognition has surged in the lab, but in the real world it too often fails the people who need it most: those with visible facial differences are being locked out of phones, services and identities. These aren’t hypothetical glitches — they’re real barriers that amplify stigma and deepen unequal access.
A Cybersecurity Merit Badge Must-Have: Best Skills
Which matters more: a badge that says “I can secure a network” or the quiet confidence you won’t let a school, hospital, or water system be crippled by a stranger online? The new cybersecurity merit badge turns curiosity into civic-duty skills—threat modeling, digital hygiene, and ethical defense—so Scouts can help protect their communities.
A Cybersecurity Merit Badge: Must-Have Guide to Best Skills
A cybersecurity merit badge isnt just a patch—its a hands-on roadmap to keeping your school, family, and town off a hackers map. Learn the must-have skills—from spotting phishing and using MFA to hardening devices and basic incident response—that turn cyber hygiene into civic responsibility.
Agentic AI: Stunning OODA Loop Risk Escalates
If your sensors can be lied to and your maps altered, who’s really making the call? Agentic AIs now run continuous OODA loops across networks and tools, turning every data feed and API into a potential point of failure — and a fast-rising security headache.
A Cybersecurity Merit Badge: Must-Have Best Practices
The Cybersecurity merit badge isn’t just a patch — it’s a set of everyday habits that protect communities: lock down identities with phishing‑resistant MFA and least‑privilege access, fix the riskiest vulnerabilities first, and make detection and response second nature.
Agentic AI OODA Loop: Exclusive Critical Flaw
We uncovered a critical blind spot in the Agentic AI OODA Loop that could derail decision-making in autonomous systems. Find out why it matters — and how to guard against it.
Agentic AI Exclusive: Critical OODA Loop Flaw
Agentic AIs OODA loops—Observe, Orient, Decide, Act—supercharge decision speed, but when sensors, data, or priors are untrustworthy, those split‑second choices can cascade into catastrophic errors. Its time to secure the inputs and orientations of these agents before speed becomes the vulnerability.
Satellite Traffic: Exclusive, Dangerous Unencrypted Gaps
Who’s listening? Turns out anyone with a modest dish—new research shows geostationary satellite communications often carry voice, SMS, and data in the clear, making in‑flight Wi‑Fi, government traffic, and critical‑infrastructure links trivially collectible and ripe for credential theft, espionage, or worse.
Satellite Traffic: Stunningly Vulnerable and Unencrypted
Think satellite traffic is secure? Think again. Vast amounts travel unencrypted, leaving privacy, safety, and critical systems worryingly exposed.
Cryptocurrency ATMs: Must-Have Guide to Affordable Access
Cryptocurrency ATMs make buying Bitcoin as easy as feeding a machine—but their instant transfers, high markups, and appeal to scammers can turn a quick purchase into an irreversible loss. This must-have guide explains how these kiosks work, the fees and fraud risks to watch for, and smart ways to protect your cash.
Apple’s Bug Bounty Program Exclusive Best Practices
Apple’s expanded bug bounty — offering up to $2 million (and over $5 million with bonuses) for zero‑click exploits — is rewriting the economics of vulnerability disclosure. With category‑specific payouts and faster awards, the Apple bug bounty aims to pull high‑value research out of gray markets and into responsible partnership with security researchers.
Smishing Triad Exclusive: Dangerous 194K Domains Revealed
Think a text cant hurt you? Researchers say a single smishing campaign has spawned over 194,000 malicious domains, turning routine SMS alerts into localized lookalike sites and clever redirect chains that steal credentials or deliver malware worldwide.
Smishing Triad Exclusive: 194K Alarming Malicious Domains
A single text can open a global crime machine — Unit 42 ties 194,000+ malicious domains to one sprawling smishing operation, so pause and verify before you click.
Microsoft WSUS flaw: Exclusive urgent fix for severe exploit
Heads up: Microsoft released an emergency patch for a critical WSUS vulnerability (CVE‑2025‑59287) that’s already being exploited in the wild. Administrators must weigh rapid deployment against potential disruption — but with exploit code circulating, closing the exposure window should be the priority.
Microsoft WSUS Critical Flaw: Exclusive Exploitation Alert
Imagine the service you rely on to push security updates becoming a vehicle for remote code execution — that’s the urgent reality for WSUS admins after Microsoft issued an out‑of‑band patch for CVE-2025-59287 (CVSS 9.8) amid public proof‑of‑concept and active exploitation. Apply the emergency update now and verify your WSUS and recovery workflows to stop attackers from turning your update pipeline into an attack vector.
Microsoft WSUS flaw Exclusive: Critical exploit active
Your update server shouldnt be the thing that unpatches you. Microsoft rushed an emergency patch for a critical Windows Server Update Service (WSUS) RCE after public proof‑of‑concept code and active exploitation surfaced — inventory and patch your WSUS servers now.
Cybersecurity Perception Gap: Exclusive Best Practices
When leaders count policies and vendors while security teams tally alerts and fatigue, real risk gets lost — the Bitdefender 2025 assessment warns this perception gap is widening into dangerous blind spots. Closing it with continuous monitoring, smarter tooling, and honest incident reporting shrinks dwell time and keeps small problems from turning catastrophic.
Cybersecurity Perception Gap: Stunning Critical Divide
Think your board believes the company is secure while the security team quietly braces for the next breach? The Bitdefender 2025 Cybersecurity Assessment exposes a growing cybersecurity perception gap—fueled by concealment pressures, alert fatigue and tool sprawl across cloud and remote environments—that could turn routine incidents into systemic failures unless organizations invest in zero-trust, consolidated telemetry and stronger detection and response.
North Korean Hackers: Exclusive Dangerous Drone Job Scam
North Korean hackers are posing as recruiters for “exclusive” drone jobs that could put applicants in real danger — here’s how to spot the scam and protect yourself.