December 2025 was a brutal reality check for security teams. While most were winding down for the holidays, threat actors weaponized a tectonic shift in the landscape, headlined by the... The post Top ...

2025 included a number of monumental threats, from global nation-state attacks to a critical vulnerability under widespread ...

Abstract: A new serious flaw has been discovered in log4j, a popular open-source tool used to produce logs within Java programs. The Log4Shell vulnerability, also referred as CVE-2021-44228, enables ...

If you're running React Server Components, you just can't catch a break. In addition to already-reported flaws, newly discovered bugs allow attackers to hang vulnerable servers and potentially leak ...

This year, MITRE made headlines primarily because its leading vulnerability database was in danger of being discontinued. For years, another issue has been plaguing the American non-profit. The ...

We sit down with Sophos CEO Joe Levy during Pax8 Beyond to discuss, among other things, the progress of the SecureWorks acquisition. He reveals how the Taegis platform is becoming the centerpiece for ...

Tens of millions of downloads of the popular Java logging library Log4j this year were vulnerable to a CVSS 10.0-rated vulnerability that first surfaced four years ago, according to Sonatype. The ...

Google has patched a zero-click vulnerability in Gemini Enterprise that could lead to corporate data leaks. The flaw was discovered in June 2025 by security researchers at Noma Security and reported ...