
Microsoft's 2026 defense report says AI is speeding up attacks. Read the fine print first.
Malik JohnsonThe vendor's own data backs most of its claims, but the sharpest numbers sit on borrowed sourcing and undefined counting.
Daily record of disclosed breaches, exploited vulnerabilities, vendor advisories, takedowns and enforcement actions.

The vendor's own data backs most of its claims, but the sharpest numbers sit on borrowed sourcing and undefined counting.

A veteran-owned federal contractor just got bigger. Here is what the acquisition actually says, and what it does not.

Fuzzing, code review, and coordinated disclosure: the quiet pipeline that turns a hidden software flaw into a patch.

Decoy systems let security teams watch real attacks unfold on machines that were built to be broken.

CVE-2024-3400, a command-injection flaw in PAN-OS GlobalProtect rated 10.0 by Palo Alto Networks, was patched on April 14, 2024 — and the vendor's own advisory says exploitation began within a day of the fix shipping.

Attackers don't need to crack your password if they can wear down your patience. Here's how push bombing works and the one setting that stops it cold.