Blog

Agentic pentesting tools are moving from buzzword to product category as vendors ship AI-driven attack-path engines. Here’s what they prove—and where they stop.

Critical CVE-2026-21589 file access bug in Atlassian Data Center stack draws probing and drives patching across Jira, Confluence and Bitbucket deployments.

Anthropic has folded Project Glasswing into an expanded Cyber Verification Program, opening reduced-safeguard Claude models to more vetted security teams.

On day one of Pwn2Own Ireland 2026, researchers chained 32 zero-day exploits against phones, smart home gear, printers and AI tools, pushing vendors to rush fixes.

BigDiskBuster PoC can silently block Microsoft Defender Antivirus platform and signature updates by exhausting disk space, leaving endpoints exposed.

The FBI has captured alleged Ploutus ATM malware developer Anibal Canelon Aguirre, a Tren de Aragua leader and the first cybercrime suspect on its Top 10 list.

FBI removed an Accenture contractor after a missed patch on a PeopleSoft-based HR portal was linked to a ShinyHunters breach exposing data on thousands of staff.

MALFEX, a long-running npm supply-chain malware campaign, has pushed eight malicious packages past 40k downloads, leaving several still live and unflagged.

UK police and Report Fraud warn of a 417% jump in hacked account losses to £6.3m, urging passkeys and 2-step verification as account takeover surges.

FBI confirms multiple arrests tied to ShinyHunters' September breach of its FBIJobs portal, as suspects in Jordan and the Netherlands face investigation.