Continuous reporting on Certificate Authority incidents, browser trust changes, root expirations, and active cryptographic vulnerabilities.
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era.
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said.
Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and agencies in 6 other countries said.
Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys.
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts.
Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6. Google's own systems were not breached, but any domain ending in .
Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions.
The FBI and Secret Service warn that the FortiBleed campaign remains an active threat targeting internet-facing Fortinet FortiGate firewalls, harvesting over 86,000 device credentials and exploiting unpatched management interfaces.
Findings from the Sixth Annual Voice of the CISO study disclose a systemic shift in modern threat dynamics: cyber risk has transitioned from external perimeter attacks directly into trusted enterprise workflows.
Artificial intelligence research lab Anthropic has announced the expansion of Claude model access to vetted cybersecurity defenders and vulnerability research teams.
Microsoft has issued out-of-band security updates for high-severity vulnerability CVE-2026-96940 in Exchange Server, which allows authenticated attackers to elevate privileges and read other users’ mailboxes.
Technical briefing on OX Security research auditing 15,465 public MCP servers, exposing data residency risks, unverified registries, and dangling domain takeovers.
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro.
Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software.
The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees.
Review of recent Certificate Transparency anomalies, CA revocation announcements, and proactive monitoring best practices.
Active TLS security bulletin from CertificateGuardian Threat Intelligence.
At Mozilla, we consider security to be a paramount aspect of the web.
Mozilla remains committed to maintaining a secure, trustworthy, and transparent Web PKI. Today we are announcing the publication of Mozilla Root Store Policy (MRSP) version 3.1, effective July 1, 2026.
Analysis of the final cutoff of legacy cross-signed root chains and its impact on legacy Android and embedded IoT devices.
New browser requirements mandate multiple independent CT log receipts for all publicly trusted certificates.
Run our deep-chain diagnostic scanner now. Inspect full intermediate certificate presentations, TLS 1.3 protocol compliance, and cipher grades in seconds.