US federal agencies will have to complete their post-quantum cryptography (PQC) migration by 2030, or 2031 at the latest depending on use cases. In a new executive order (EO) signed on June 22 (EO 14409), US president Donald Trump issued… Read More "Trump Issues Executive Order to Fast-Track Post-Quantum Migration"
Carl Froggett combines CISO and CIO. He currently occupies both positions at Deep Instinct. Before then, he was CISO at Citi for almost 17 years. Combining CISO and CIO Froggett has long believed the two roles overlap, making a combined… Read More "CISO Conversations: Carl Froggett – Combining CISO and CIO at Deep Instinct"
A malicious npm package has been caught impersonating one of the JavaScript ecosystem’s most widely used build tools. The lookalike package hid a multi-stage Windows remote access trojan (RAT) in a supply chain attack on developer machines. New analysis from… Read More "Lookalike npm Package Hides a Multi-Stage Windows RAT"
Four vulnerabilities in the open source AI platform Dify could be exploited to siphon other tenants’ data in multi-tenant cloud configurations, Zafran Security warns. A highly popular LLMOps platform for creating, deploying, maintaining, and monitoring AI applications, Dify powers over… Read More "Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps"
Ravie LakshmananJun 23, 2026Workflow Security / Software Supply Chain GitHub is moving to strengthen software supply chain security by updating “actions/checkout” to block pwn request attacks that exploit the risky use of the “pull_request_target workflow” trigger to run malicious code… Read More "GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns"
OpenAI has expanded its cyber-defense program Daybreak, arguing that artificial intelligence (AI) has flipped the hardest part of security from finding software flaws to fixing them. In an announcement on June 22, the company said the expansion centered on patch… Read More "OpenAI Expands Daybreak to Help Defenders Patch Flaws"
Researchers found an eight-year old high severity vulnerability affecting nearly all Samsung devices from the Galaxy S9 to S25 living within the KNOX kernel. The flaw (CVE‑2026‑20971, CVSS 7.8) could be exploited through the interaction between PROCA and FIVE. PROCA,… Read More "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks"
Every weapon begins as an extension of the hand that holds it. The spear lengthened the reach of the arm. The bow sent the point flying without the throw. The rifle placed a man’s death a quarter mile beyond his… Read More "The Weapon That No Longer Needs a Warrior"
DART contained both intrusions using a structured response playbook, the report said, pulling telemetry from identities, endpoints, and cloud services into a single view to spot abnormal behavior, flag credential misuse, and track the attackers. It briefed the affected customer… Read More "Unpatched SharePoint servers opened the door to multiple attackers, Microsoft finds"
As Rockstar Games announced pre-orders for Grand Theft Auto VI (GTA 6) will be available from June 25, scammers have already whipped up fake websites offering early access. These websites are offering access to GTA 6 and VIP early access… Read More "GTA 6 Scams Emerge as Pre-Orders Open"
