Belgian cyber unicorn Aikido has acquired Israeli startup Root, whose AI agents patch open-source flaws in minutes without forcing risky upgrades ...

Safety requirements for AI in cybersecurity cannot be limited to proselytizing about good intents, it must demonstrate ...

SonicWall today released its 2026 Healthcare Protect Brief, a vertical-specific companion to the SonicWall 2026 Cyber Protect Report, revealing that healthcare cybersecurity remains the most ...

Attackers stole a long-lived npm access token belonging to the lead maintainer of axios, the most popular HTTP client library in JavaScript, and used it to publish two poisoned versions that install a ...

Attackers have upped the ante in their exploits of a recently-disclosed maximum severity vulnerability in React Server Components (RSC), Next.js, and related frameworks. Attackers initially exploited ...

Ongoing vulnerable Log4j downloads suggest the supply chain crisis wasn’t the wake-up call it should have been. Back in December 2021, the “internet on fire” headlines weren’t hyperbole. Security ...

In December 2021, a critical vulnerability known as Log4Shell (CVE-2021-44228) was discovered in the widely-used Apache Log4j logging library. This flaw allowed attackers to execute arbitrary code on ...

Abstract: On December 10, 2021, Log4Shell was disclosed to the public and was quickly recognized as a most severe vulnerability. It exploits a bug in the wide-spread Log4j library that allows for ...

Written by Shilpesh Trivedi and Nisarga C M. The Uptycs Threat Research Team has uncovered a large-scale, ongoing operation within the Log4j campaign. Initially detected within our honeypot collection ...

The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis has ...

Cybercriminals are stealing source code—computer instructions that developers translate into software. Criminals study and alter software’s underlying source code to better identify its flaws, ...