Internal records obtained by WIRED reveal how, for years, United States Customs and Border Protection employees and contractors were accused of abusing sensitive government databases for reasons that had nothing to do with their jobs. The records contain hundreds of… Read More "CBP Workers Allegedly Used Government Databases to Spy on Exes, Crushes, and Colleagues"
Critical VMware vCenter Vulnerability in Attackers’ Crosshairs
Threat actors have started exploiting a recently patched critical-severity vulnerability in VMware vCenter, rapid incident response company Quirso reports. The bug was disclosed on July 29, when Broadcom patched it alongside four other security defects in multiple VMware products. Tracked… Read More "Critical VMware vCenter Vulnerability in Attackers’ Crosshairs"
Microsoft wants you to rethink your approach to cyber defense
Cyber defenders need to shake off traditional best practices and switch from reactive patching to building inherently resilient systems in the face of AI-accelerated vulnerability discovery, according to a senior security manager at Microsoft. David Weston, group manager in the… Read More "Microsoft wants you to rethink your approach to cyber defense"
NVIDIA’s Open Security AI Alliance Is Missing Some Big Names
NVIDIA has assembled nearly 40 technology companies behind a new initiative to build open source security tools for AI, although the coalition launches without participation from several of the industry’s most influential AI developers. Announced on July 27, the Open… Read More "NVIDIA’s Open Security AI Alliance Is Missing Some Big Names"
Biggest Data Breaches in US History (Updated July 2026)
The United States remains the most breached country on earth, and it’s also the most expensive place in the world to suffer a breach. That combination is why a US-focused view of the largest incidents matters more than a global… Read More "Biggest Data Breaches in US History (Updated July 2026)"
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Ravie LakshmananAug 13, 2026Vulnerability / Enterprise Security Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a… Read More "Attackers Exploit SharePoint Authentication Bypass After Public PoC Release"
Coca Cola Reveals Subsidiary Fairlife Suffered Data Breach
A dairy company owned by Coca-Cola Company suffered data theft as well as production outages following a July ransomware attack, the drinks giant has revealed. Coca-Cola said in a brief statement on July 27 that Chicago-based Fairlife had now “resumed… Read More "Coca Cola Reveals Subsidiary Fairlife Suffered Data Breach"
What is a Content Security Policy (CSP)?
Every website needs to be set up with a cloud service provider, but what about your other CSP: Content Security Policy? The Content Security Policy (CSP) is a standard provided in an HTTP response header that helps prevent cross-site scripting… Read More "What is a Content Security Policy (CSP)?"
Microsoft Launches Flurry of AI Security Initiatives
You need agents to fight agents. At least that’s what David Weston, corporate VP for AI security at Microsoft told his audience during a Microsoft Security launch preview on July 27. During the event, the Redmond-based company announced a flurry… Read More "Microsoft Launches Flurry of AI Security Initiatives"
Phishing Dominates as Initial Entry Method for Cyber-Attacks
Phishing attacks were the dominant method of initial entry for cyber incidents that required remediation during the last quarter, analysis of attacks by the incident responders who were called in to deal with them has revealed. This as campaigns have… Read More "Phishing Dominates as Initial Entry Method for Cyber-Attacks"