> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
Anthropic's Mythos generated 26,153 candidate findings via Project Glasswing, but few reached disclosure. The bottleneck is human triage, not discovery.
Firewalls, MFA and security tools strengthen defenses. But one human mistake can still open the door. Why the human factor remains critical in cybersecurity.
GreyNoise tracked AI agents exploiting PaperCut flaws, hitting 440+ instances across 395 organizations in 48 countries. Campaign mechanics and patch guidance.
cPanel patched an EmailTrack SQL injection letting a mail account run code as root (CVE-2026-67401, CVSS 9.9). Affected builds, patch steps and open questions.
Misi Rakyat says it was hit by a malicious cyberattack. What the Sep 9 statement confirms, what it leaves open, and how it compares to the Sep 8 leak analysis.
Samples allegedly expose Misi Rakyat customer, rider and vendor data — location, KYC, config. Here is what can actually be established.
Malaysians lost RM28.67M to QR scams in H1 2026. How quishing works, why QR codes are easy to abuse, and what to check before scanning.
OpenAI's GPT-6 Astra is a 1.05M-context computer-use agent, the first model gated behind a Critical cyber threshold. Notes replace compaction in Codex.
Six critical ArcGIS CVEs in a year — SQLi, auth bypass, SSRF. Attackers tied to a Chinese APT held one deployment for a year.
JFrog patches a CVSS 9.8 auth bypass letting attackers mint admin tokens. Exploited ~4 days after disclosure — here's what happened and the fix.