Cloud security · News & analysis
Gheist Turns GitHub Workflow Logs Into a Route Out for Cloud Secrets
Wiz’s new investigation shows why private repository access and cloud trust policies belong in the same incident review.
NEWS · ALERTS · RESEARCH
Search cybersecurity coverage
Original cybersecurity reporting and practical analysis, alongside headlines from trusted publications, agencies and researchers.
Original reporting & analysis
Critical infrastructure · News & analysis
SENTRON Fuse Advisory Adds Network Recovery to the Maintenance Checklist
CISA’s republication of a Siemens advisory highlights a denial-of-service condition whose recovery can require rebuilding the affected network.
Cloud security · News & analysis
AWS’s Hybrid Access Guidance Makes Certificate Rotation a Service-Continuity Issue
New PKI guidance asks cloud teams to connect short-lived credentials with clear workload identities, protected keys and tested renewal procedures.
Critical infrastructure · News & analysis
MicroSCADA Advisory Makes Access Controls Part of the Upgrade Plan
CISA’s October 20 republication distinguishes flaws addressed by version 10.8 from an authentication issue that also requires mitigation.
Critical infrastructure · News & analysis
ArmorBlock Security Fixes Put Industrial Web Access on the Maintenance Agenda
Rockwell Automation’s advisory covers password changes without authentication and a separate availability flaw.
Vulnerabilities & patches · News & analysis
FreeRTOS DNS Fix Requires a Configuration Change After the Upgrade
An AWS advisory makes firmware settings part of the remediation: installing the fixed network library alone does not close the DNS issue.
Security technology · News & analysis
VMware HyperArmor Puts the Hypervisor’s Trusted Baseline Under Scrutiny
Broadcom’s new host protections make deployment review, script approvals and emergency access important parts of a security evaluation.
Security technology · News & analysis
Patch Dashboards Need to Show Which Devices Are Still Exposed
N-able’s October guidance highlights the gap between sending an update and verifying the endpoint has completed it.
Threat intelligence · News & analysis
MATCHBOIL’s Changing Disguises Put Endpoint Investigation in Focus
ESET’s new research traces a downloader used against Ukrainian organizations and explains why an apparently harmless program can conceal a second role.
Ransomware · News & analysis
Record Ransomware Claims Demand Careful Reading—and a Recovery Test
Comparitech’s third-quarter report separates confirmed incidents from unverified claims, a distinction that matters when businesses turn threat statistics into spending decisions.
Critical infrastructure · News & analysis
Red Lion Switch Advisory Puts Industrial Management Access in Focus
CISA details seven N-Tron 700 Series weaknesses, with a firmware update and changes to management access among the recommended measures.
Data breaches · News & analysis
Advantest’s October Notice Confirms Personal Data Was Taken in February
A newly issued notification separates the earlier intrusion from the personal-data consequences now being communicated to recipients.
Critical infrastructure · News & analysis
EasyIO FG Advisory Leaves Building Operators With a Replacement Decision
Johnson Controls’ retired controller line will not receive a firmware fix for the weaknesses described in a new CISA advisory.
Identity & access · News & analysis
Auth0’s PrivateLink Gateway Pattern Puts Environment Boundaries in Focus
Auth0’s new architecture guidance routes a private connection to multiple environments, placing gateway rules at the center of the security review.
Critical infrastructure · News & analysis
ABB Advisory Puts Engineering Workstation Privileges Under Review
Two PCM600 weaknesses make service accounts and project-file handling practical priorities for energy operators and their support providers.
Ransomware · News & analysis
Ransomware Recovery Plans Need an Answer for Stolen Data
New Zscaler findings distinguish the growth of stolen data from victim counts—and show why a successful restore cannot settle every extortion incident.
Critical infrastructure · News & analysis
Toptech Advisory Puts Terminal Software on the Patch Agenda
CISA identifies serious TMS7 and TopHAT weaknesses and points operators to a release that addresses the reported issues.
Identity & access · News & analysis
Blueprint Alliance Puts AI Agent Ownership at the Center of Identity Security
A cross-vendor initiative proposes a shared architecture for agents, while implementation and interoperability remain the tests ahead.
Critical infrastructure · News & analysis
Desigo Advisory Turns Building-Graphics Permissions Into a Security Priority
A Siemens vulnerability notice highlights the risk of malicious graphics documents in building-management environments.
Critical infrastructure · News & analysis
CISA and FBI Put Industrial Integrator Access Under the Microscope
New guidance asks operators to examine the data and control they entrust to the companies maintaining industrial systems.
Policy & compliance · News & analysis
CISA’s CVE Quality Push Puts Vulnerability Data Under Review
A new framework focuses on the foundations beneath patching decisions: governance, participation, infrastructure and dependable records.
Headlines from our sources
1 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
Huntress