Browsing Category
Security
162 posts
Cybersecurity news, software supply chain risk, privacy threats, and practical security guidance.
FortiBleed Lockouts Hit FortiGate Firewalls: What Admins Should Check
The FBI says FortiBleed is still compromising FortiGate gateways and locking out admins. Here are the accounts, API keys and logs to check now.
Microsoft Execution Containers Put AI Agents Behind OS-Enforced Boundaries
Microsoft Execution Containers are now generally available, with file, network, UI and session controls for AI agents. Here is how MXC works and what IT teams should test.
Fake Google HTTPS Certificates Came From Hijacked Country Domains
Attackers hijacked .gh, .sl and .as registries to obtain valid HTTPS certificates. Here is how the attack worked and what domain owners should check.
Apple Is Tightening macOS Full Disk Access as AI Agents Raise the Stakes
Apple plans stronger approval controls for macOS Full Disk Access as AI agents gain autonomy. Here is what the permission exposes, what Apple has not specified, and how to audit it now.
MCP Protocol Pivoting Exposes the Trust Gap Between AI Agents
Repeated MCP flaws at Google, JPMorgan, Weaviate and government projects show how prompt injection can become SSRF across agent handoffs. Here is what builders should fix.
Gemini 4 Argon Debuts With 1M-Token Output, but Access Starts With Cyber Defenders
Google's Gemini 4 Argon pairs a one-million-token output limit with low introductory pricing, but only vetted cyber defenders can use it first.
Cloudflare Plans a Post-Quantum Certificate Authority: What Changes for HTTPS
Cloudflare plans to issue free classical and post-quantum certificates in 2027. Here is how Merkle Tree Certificates work and what website teams should prepare now.
NVIDIA’s Open Agent Safety Platform Moves Guardrails Outside the Model
NVIDIA’s OpenShell runtime restricts AI-agent files, networks, processes and credentials, while Sentry adds a BlueField-4 hardware watchdog. Here is how the stack works and where its claims still need proof.
Apple’s iOS 26 Zero-Day Fix: Update to 26.7.1 Now
Apple says CVE-2026-86950 may have been exploited in targeted attacks. Here are the affected iPhone, iPad and Mac versions, fixed releases, and checks to make now.
Citrix NetScaler Zero-Days: Patch Now, Then Hunt for Web Shells
Citrix patched two actively exploited NetScaler zero-days that allow unauthenticated remote code execution. Here are the fixed builds, attack path, log hunts and response order.