Tampered versions 2.1.312 and 2.1.313 of a Claude Code extension were live in Cursor's marketplace for about eleven hours on Oct. 29. Here is who is affected, the…
Mistral has released the weights for Mistral Large 4, a roughly trillion-parameter model aimed at coding and cyber defense. The performance claims are the company's own, and key…
Binance says about $6.3 billion in assets were involved and about $3 billion frozen. Estimates differ, the cause is still being investigated, and deposits and withdrawals are paused.
Google says Gemini 4 Carbon tops an independent intelligence index and leads on vulnerability-finding benchmarks, but access is limited to a group of cyber defenders for now.
Tailscale has released v1.104.4 and four security bulletins for the Tailscale SSH privilege-escalation issues. Here is what the company says, what is still unclear, and what admins should…
Reuters reports a hacker is trying to breach the Federal Election Commission, and its electronic filing system is offline a week before the midterms.
Railway says an intruder decrypted some customer environment variables. Here is what the company has confirmed and the order in which to rotate your secrets.
GitLab fixed a maximum-severity flaw on October 21 that lets an unauthenticated attacker run code on self-managed servers. Here are the fixed versions, the downtime catch, and what…
PHP2Shell is a pair of critical PHP flaws that PHP patched on October 21, with attack attempts reported before the fix. Here's who is affected, which versions to…
Proofpoint has agreed to buy Varonis for about $6.3 billion in cash, or $49.75 a share. Here's what the deal includes, what the 52% premium means, the AI-agent…
Attackers got root control of a fully patched Ivanti VPN. Here's what Volexity found, which versions are affected, and what admins and employees should do now.
