PHP releases emergency fixes for 2 critical vulnerabilities
The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw.
Advertisement
Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign
Geopolitics
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
AIFeatured on CyberScoop
-
Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers
-
Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme
-
ConnectWise customers hit by supply-chain attack linked to compromised API secret
-
DOJ escalates fight for election supremacy with California raids
-
Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
Advertisement
Popular Stories
The AI hacking apocalypse is not inevitable
While large language models present real risks to society, experts say they can be tested and largely controlled using well-worn cybersecurity and policy choices.
How software development’s speed obsession enabled TeamPCP’s chaos crusade
The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security.
Inside the race to adapt to an AI-powered security world
AI is breaking things faster than anyone can fix them. Security leaders across the industry are racing to figure out what comes next.
Security leaders say the next two years are going to be ‘insane’
Kevin Mandia, Morgan Adamski, and Alex Stamos tell CyberScoop that AI is finding bugs faster than anyone can fix them, exploit development is accelerating, and most organizations…
Advertisement
Insights
Why federal cyber defense demands an offense-driven mindset
Weaponized AI: The new frontier of fraud and identity spoofing
Why cyber modernization requires partners with technical plus acquisition expertise
Why identity is the definitive cyber defense for federal agencies
The Latest
DHS to ban DeepSeek from federal civilian agencies
Spyware found on devices belonging to prominent Serbian critics as elections loom
Federal agencies recommend cyber controls, independent testing for frontier AI systems
Prolific Chinese espionage group exploits BeyondTrust zero-day
Cybersecurity incident at BAE Systems disrupts US bankruptcy court system
Proofpoint to buy Varonis for $6.3 billion
The next election influence campaign will target your AI chatbot
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
Senators press Trump admin to rally federal government around AI safety, security
Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
Upcoming Events
Threat Response Forum
Ritz-Carlton, Pentagon CityWebinar: Racing the Exploit Clock
Virtual EventFedTalks
Waldorf Astoria, Washington, D.C.Webinar: Unleashing the Genesis Mission – Human-Machine Teaming in Nuclear Security
VIRTUAL EVENTAI & IT Modernization Summit
Virtual Event
Advertisement
Advertisement