Enabling organizations to provide ethical hackers with legal protection and financial rewards for identifying security flaws.

Five individuals admitted to helping threat actors get hired at US companies by providing false identities and remote access ...

Researchers discovered a security weakness in the AI-powered coding tool that allows malicious MCP server to hijack Cursor's ...

A critical Fortinet FortiWeb vulnerability capable of remote code execution has been exploited in the wild.

Amazon Web Services VP Sara Duffer highlights the top lessons she brought back to her security role after taking part in Amazon's shadow program.

The Akira ransomware group has been experimenting with new tools, bugs, and attack surfaces, with demonstrated success in ...

A public dataset and platform-agnostic analysis tool aim to help orgs fight against Apple malware, which researchers say has ...

A self-replicating attack led to a tidal wave of malicious packages in the NPM registry, targeting tokens for the tea.xyz ...

A kitchen-sink approach to building containers has loaded many with vulnerabilities. Here are the companies addressing the ...

Most enterprises use more than 1,000 apps, according to ESG research, yet about half are integrated with IGA. Industry ...

In 2025, employees are still using weak passwords. Instead of forcing an impossible change, security leaders are working ...

South America's largest country is notorious for banking malware attacks; Maverick self-terminates if its targeted user is ...