Trump executive order sets 2030 deadline for federal post-quantum crypto migration
President Trump signed an executive order on June 22 that imposes hard deadlines on federal agencies to migrate their most…
Security
Cybersecurity, vulnerabilities, threats, and defense
Squidbleed: 29-year-old proxy bug can leak your cleartext HTTP requests
A heap over-read bug in the Squid web proxy — present since a 1997 FTP-parsing code change — can leak…
Fake AI Agent Skill Slipped Past Every Security Scanner Tested
Security firm AIR built a fake AI agent skill that sailed through every security scanner they tested, got promoted via…
Key Scattered Spider Members Plead Guilty as Trial Opens
Two members of the Scattered Spider cybercrime gang pleaded guilty in a UK courtroom this week — on the very…
LastPass confirms data breach in Klue supply chain attack
LastPass has confirmed that hackers accessed customer data from its Salesforce environment after stealing OAuth tokens in the Klue supply…
The exploit doesn’t exist. You can still prove it works against you
For thirty years, vulnerability management relied on a comfortable buffer — months between when a flaw was found and when…
Agentic AI Is Reshaping Offensive Cyber Operations
For three years, AI has been an assistant in cyber offense — drafting phishing emails, proposing exploits, sketching malicious code…
There’s Now a Search Engine for Stolen Credentials — and It’s Thriving
Attackers don’t need to wade through massive credential dumps anymore. They can just pay someone else to find exactly what…
Microsoft Patches AutoJack — a Vulnerability That Let Malicious Webpages Hijack AI Agents
Microsoft fixed a vulnerability chain called AutoJack in AutoGen Studio that could let attackers execute arbitrary commands on a developer’s…
Windows 11 26H2 Is Coming Soon, and the Upgrade Path Is Unusually Simple
Microsoft has confirmed that Windows 11 version 26H2 is the next feature update, and it’s already in testing with Windows…