Organizations face a critical blind spot in their security posture: “identity dark matter”—the vast collection of orphaned accounts, shadow identities, and forgotten access permissions that exist beyond traditional IAM visibility. These invisible identities create an exploitable attack surface that
Acer Wave 7 Mesh WiFi routers contain multiple maximum severity (CVSS 10.0) zero-day vulnerabilities that allow unauthenticated remote attackers to execute arbitrary code, bypass authentication, and gain complete control over affected devices. These critical flaws remained unpatched at the time of d
OpenAI has granted UK banking institutions early access to GPT-5.5 capabilities following Anthropic’s decision to exclude financial services from its Glasswing enterprise AI expansion. This strategic divergence highlights competing approaches to AI deployment in high-security sectors, with UK financ
OpenAI has granted UK financial institutions early access to its GPT-5.5 model, positioning itself as the primary AI provider for Britain’s banking sector. This development comes as Anthropic excludes UK banks from its Glasswing enterprise expansion program, creating a competitive divide in enterpri
A Spanish hacker known as “Alcasec,” who styled himself as the “Robin Hood of Spanish Hackers,” has been sentenced to 31 months in prison for stealing and exposing sensitive banking data. Despite claims of acting in the public interest by exposing security vulnerabilities, the court found him guilty
A critical unpatched vulnerability in Windows Search allows attackers to steal NTLMv2 password hashes through specially crafted search URI protocol handlers. By exploiting this flaw, threat actors can force Windows systems to leak authentication credentials to remote servers without user interaction
Researchers have successfully deployed machine learning algorithms to crack medieval ciphers that have stumped cryptographers for centuries. By training neural networks on historical texts and cipher patterns, AI models can now automatically decrypt substitution ciphers, polyalphabetic codes, and ot
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple Android and Linux Kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. Federal agencies must patch these flaws by the mandated deadline, while privat
An international law enforcement operation has successfully dismantled nine organized crime groups operating illegal streaming services across multiple countries. The coordinated crackdown resulted in numerous arrests, server seizures, and the shutdown of platforms that illegally distributed copyrig
Google has introduced a new security feature in Android to combat the rising threat of AI-generated deepfake voice scams. The protection system uses on-device machine learning to detect suspicious audio patterns indicative of synthetic voice manipulation during phone calls. This proactive measure ad