Japanese Telecom Giant KDDI Confirms Breach Hits 12 Million Customers
KDDI, Japan’s second-largest mobile carrier, confirmed a data breach affecting over 12 million people. Attackers got email addresses and passwords…
Security
Cybersecurity, vulnerabilities, threats, and defense
The Chasm Between Skill and Ability Is Getting Wider — AI Is Why
Last week, Five Eyes security agencies issued a joint warning about AI models autonomously hacking into systems. The headlines were…
CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog
CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog on Tuesday. All four are being actively exploited right now….
GhostLock: 15-Year-Old Linux Kernel Bug Lets Any User Go Root
GhostLock is bad. Really bad. It’s a 15-year-old Linux kernel vulnerability that lets any logged-in user take full root control…
CISA Orders Federal Agencies to Patch Critical ColdFusion Flaw by Friday
CISA has had enough. The agency ordered all federal civilian agencies to patch a maximum-severity Adobe ColdFusion vulnerability by Friday….
SSH Keys: The Silent Machine Identity Crisis Most Orgs Ignore
SSH keys are everywhere. They’re in CI/CD pipelines, server configs, developer laptops, and cloud instances. And almost nobody manages them…
Your Edge Infrastructure Has No Witness — And That’s a Problem
Most security incidents leave a trail. An EDR alert, a firewall log, an IdP audit record — something you can…
16-Year-Old Linux Bug Januscape Enables VM Escape Exploit
There’s a bug in the Linux kernel that’s been sitting there for 16 years. It’s called Januscape, and it lets…
AI is moving faster than governance — and that’s a problem
Meetings are happening right now in boardrooms everywhere. Executives are talking about AI acceleration. They’re throwing around words like “token…
SWN #596: FatFs bugs, Claude, PolinRider attacks, and robot rentals
Security Weekly News episode 596 dropped July 7, covering a packed week in infosec. Here’s what stood out. AI found…