Vulnerability reports, breach analysis, zero-day disclosures, and practical guides to keeping your data, identity, and infrastructure safe.
A catastrophic vulnerability, “TrustFall,” has been found at the heart of the web’s next-generation identity standard. Researchers at CipherTrace Labs revealed a flaw that could allow widespread impersonation, shaking the very foundations of decentralized trust.
A severe vulnerability in Cilium, a cornerstone of modern cloud networking, has been disclosed. Codenamed "TidalMesh," the flaw allows sophisticated attackers to bypass network policies and escape containers, putting thousands of Kubernetes clusters at immediate risk.
A newly disclosed vulnerability in the burgeoning HTTP/4 protocol, dubbed "StreamJacking," exposes a fundamental flaw that could allow attackers to hijack sessions and manipulate data on encrypted connections, sending shockwaves through the infrastructure community racing to deploy a patch.
AI-driven attacks, sprawling SaaS, and remote teams have pushed zero-trust from theory to table stakes. Here's how to actually implement it.