Exposure management

Companies will finally realize that they can't compete without embracing what comes next.

Five new China-linked groups join rapid React2Shell exploitation, raising urgency to patch now.

Experts point out that our adversaries now use GeoServer to collect intelligence data.

Combine untrusted human input, access to sensitive data, and a path to exfiltrate information – and AI agents become dangerous.

The malware retrieves C2 addresses from Ethereum smart contracts to avoid takedowns.

An indirect prompt injection could have exfiltrated data from emails, documents or calendars.

10.0 RSC flaw actively exploited in the wild by China-based threat groups within hours of public disclosure leads the pack for December's Patch Tuesday.