Security Bulletin

An analysis of Project Glasswing findings shows only a fraction have reached disclosure, and an even smaller number have been fixed.

In one of India's least industrialized regions, we're helping rural women access the digital tools they need to build real enterprises — and the ripple effects are opening pathways to economic mobility for entire communities.

AI-agent security doesn't end with authentication. Instead, that's only the beginning.

US agencies claim Chinese companies covertly extracted billions of tokens from OpenAI, Anthropic, Google Gemini, and SpaceX's Grok to reduce development costs.

Memory-resident malware targeting F5 BIG-IP appliances can evade file-based security defenses.

Nine months ago, we introduced the Integrated AI Safety and Security Framework as a unified and comprehensive taxonomy to help organizations identify and mitigate the security and safety risks unique to AI systems. Existing frameworks remained.....

September 2026 Patch Tuesday set a record and teams must now shift to risk-based prioritization versus simply finding bugs.

Cisco and Axis Communications now allow managing Axis devices directly via the Meraki dashboard. This integration unifies IT and physical security, providing centralized visibility and simplified operations on a single, scalable platform.

Still burning weeks on manual infrastructure deployment? Stack Automation by Quali, co-developed with Cisco, is now available—turning that grind into an automated, cloud-like experience that takes minutes.

"Workflow identity hijacking" can bypass standard security controls and hijack an organization's data by sending a basic request through an unauthenticated entry point.

The DoppelCart operation, identified by cybersecurity startup Nebty, operates an extensive network of fake online stores, with over 105,000 sites still active.

Sergei Anatolyevich Filimonov and his alleged co-conspirators operated an extensive scheme starting in November 2023, which involved spoofing bank domains to obtain customer credentials, according to US authorities.