Confer offers end-to-end encryption for AI conversations, ensuring that user interactions remain private and cannot be accessed, stored, or used for training by third parties, including Confer itself.
The vulnerabilities, CVE-2026-22218 (arbitrary file read) and CVE-2026-22219 (server-side request forgery), allow attackers to exfiltrate sensitive environment variables, including API keys, credentials, and cloud storage secrets.
This independent report by the Ponemon Institute, sponsored by OPSWAT, reveals that organizations face serious gaps in file security, with 61% reporting file-related security incidents over the past two years at an average cost of $2.7 million per organization. Insider threats, lack of visibility into file access, and vulnerability during uploads ...
In March 2025, a political advocacy group reportedly contacted two DOGE members at the Social Security Administration (SSA) with a request to analyze state voter rolls they had acquired, with the stated aim of finding evidence of voter fraud and overturning election results.
While not naming specific companies, the new package grants the Commission authority for EU-wide risk assessments and to support restrictions or bans on equipment in sensitive infrastructure.
Major South Korean telecommunications provider SK Telecom was reported to have taken legal action to rescind the record $91 million penalty imposed by the Personal Information Protection Commission following an April cyberattack that compromised all its 23 million users, according to Yonhap News Agency.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.