Bruce Schneier on security theater, AI snake oil, and the limits of cryptographic morality.

Attacks targeting government and contractor companies in Poland and Romania via NTLM exploit.

A ransomware attack and incident involving former employees led to potential HIPAA violations.

Sports venue support company said sensitive information was stolen, but offers no further details.

CISA guidance follows reports of Oracle Cloud breached, which the company denies.

IBM’s X-Force 2025 Threat Intelligence Index reveals an increase in misuse of valid credentials.

Nearly 9 in 10 apps tested by Zimperium used encryption that did not adhere to best practices.

The lesserknown ransomware group uses fake updaters on compromised sites to lure victims.

North Korea-linked group targets developers with job offers that lead to poisoned coding challenges.

Foundation to support CVE Program formally announced amid news that program was saved.