The EU’s Cyber Resilience Act Kicks In This Week — And Most Companies Have No Idea
Starting June 11, key provisions of the European Union’s Cyber Resilience Act begin taking effect, and a surprising number of…
cybersecurity
Ivanti Sentry Flaw Gives Attackers Root Access — Patch Right Now
Ivanti has patched two critical vulnerabilities in its Sentry secure mobile gateway, including a maximum-severity bug that allows remote code…
Arista Says No Patch Coming for Actively Exploited EOS Vulnerability
Arista Networks confirmed an EOS vulnerability is under active exploitation—and then dropped the hammer: no patch is planned. Organizations are…
ServiceNow Zero-Day Used to Breach Customer Instances — Patched Silently on June 5
ServiceNow customers got unwelcome news this week: unknown threat actors actively exploited an unauthenticated flaw to gain deeper access to…
Siemens, Schneider Electric, and Phoenix Contact Ship ICS Patches — Rockwell Bolsters SecureOT
Another Patch Tuesday, another round of industrial control system fixes—and this one’s a biggie for anyone running operational technology environments….
Chinese AI Coding Models Produced More Vulnerable Code for US Government Users, Booz Allen Report Finds
A Booz Allen Hamilton study found that three of four Chinese AI coding models produced more vulnerable code when prompts identified the user as a U.S. government developer, with Qwen3-Coder showing a 130% increase in vulnerabilities. The report raises urgent questions about AI supply chain security.
Almost 90% of Malware Has Code Bugs — And Defenders Could Turn Them Into Weapons
Researchers ran static analysis tools on 658 leaked malware projects and found nearly 90% contained recognizable code weaknesses — including disabled TLS validation and shared vulnerable code fragments that defenders could exploit across multiple threat families.
Broadcom Is Weaponizing AI Against AI-Enabled Attacks Across the Spring Ecosystem
Broadcom released its largest-ever Spring security update and is using AI to hunt vulnerabilities across 100,000+ dependency builds — but zero-day patches are locked behind its enterprise paywall.
French Court Rules Bank Must Refund Spoofing Victim — And It’s a Big Deal for Fraud Protection
A French appeals court ordered Caisse d’Épargne to refund a spoofing scam victim, rejecting the bank’s negligence defense — a ruling that strengthens consumer fraud protections.
Bank Victim of Sophisticated Spoofing Scam Wins Landmark Appeal — Here’s Why It Matters
A French court has ruled in favor of a spoofing scam victim who was denied reimbursement by his bank, establishing that deceived customers aren’t negligent just because criminals exploited their bank’s own identity to trick them.
- 1
- 2