A Ben-Gurion University team just showed how CPU workload modulation leaks 40 bits per second through Faraday cage walls. Air-gap assumptions need a rewrite.
ShinyHunters claims 275 million records from 9,000 universities via a single Canvas teacher account. The blast radius math is the story, not the ransom note.
Cisco buys Astrix, ServiceNow ships Autonomous Security & Risk, XBOW closes $155M. The non-human identity bill is landing on CFO desks this quarter.
A nine-year-old bug in the Linux kernel's crypto interface just became a one-command root exploit. No patches, no CVE at first, and the embargo is already in pieces.
A CVSS 9.3 zero-day in PAN-OS Captive Portal is being exploited by state-backed crews for unauthenticated root RCE. No patch exists. Mitigations only.
A CVSS 9.8 cPanel auth bypass got chained into a cross-border espionage campaign. The platform decision sitting on every CTO's desk just got more expensive.
Vimeo's user database was breached through Anodot, an analytics vendor. ShinyHunters used trusted API connections to walk past the perimeter. Here's the engineering read.