New REST API gives developers programmatic access to NIST FIPS 204 post-quantum document authentication — sign any ...

Why an overlooked data entry point is creating outsized cyber risk and compliance exposure for financial institutions.

A critical vulnerability in Grandstream GXP1600 series VoIP phones allows a remote, unauthenticated attacker to gain root privileges and silently eavesdrop on communications.

OpenClaw jumped from 1,000 to 21,000 exposed deployments in a week. Here's how to evaluate it in Cloudflare's Moltworker sandbox for $10/month — without touching your corporate network.

Deep dive into authentication methods for B2B. Learn about SAML, OIDC, FIDO2, and passwordless flows to secure your enterprise apps and prevent data breaches.

CX platforms process billions of interactions yearly — but no security tool monitors what their AI engines ingest. Six blind ...

Researchers say an AI-powered code scanner traced untrusted data across layers of OpenClaw, exposing exploitable weaknesses including SSRF, authentication bypass, and path traversal.

Researchers say threat actors used the sophisticated — and unfortunately named — toolkit to target high-value networks for ...

Two popular AES libraries, aes-js and pyaes, “helpfully” provide a default IV in their AES-CTR API, leading to a large number of key/IV reuse bugs. These bugs potentially affect thousands of ...

CVE-2026-2329 allows unauthenticated root-level access to SMB phones, so attackers can intercept calls, commit toll fraud, and impersonate users.

Are you a good bot or a bad bot? More than 30 malicious Chrome extensions installed by at least 260,000 users purport to be ...