The security updates resolve over 800 vulnerabilities across 17 product families, including over 100 critical-severity flaws.
AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage.
The incident occurred in May, when RubyGems maintainers suspended new account registrations due to what appeared like malicious activity.
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here’s a proposal to make that the default.
Security teams must treat autonomous agents as highly privileged identities.
For twenty-five years, “data” in security meant logs and events. But logs are a lossy representation of reality.
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
Explore what it takes to operationalize continuous authorization at scale, including the technical, organizational, and cultural changes required.
RegisterJoin as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
Register
SecurityWeek’s 2026 Attack Surface Management Summit will evaluate how organizations can protect corporate assets and reduce their attack surface in a modern security program.
[September 16, 2026 | Virtual]
SecurityWeek’s ICS Cybersecurity Conference celebrates its 25th anniversary in Nashville. Join the largest and longest-running event series focused on industrial cybersecurity.
[October 6-8, 2026 | In-Person]
SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[October 14, 2026 | Virtual]
SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[August 19, 2026 | Virtual]
-
The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data. (September 16, 2026)
-
The security updates resolve over 800 vulnerabilities across 17 product families, including over 100 critical-severity flaws. (September 16, 2026)
-
AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage. (September 15, 2026)
-
The updates resolve kernel vulnerabilities that could lead to memory corruption, privilege escalation, system termination, and information leaks. (September 15, 2026)
-
Noteworthy stories that might have slipped under the radar: Invisible Unicode slips past phishing filters, US puts $10 million bounty on Iranian cyber official,… (September 11, 2026)
-
Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023. (September 11, 2026)
-
Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix. (September 8, 2026)
-
The scammers purchased fleets of sports cars, flew on private jets, hired security guards and rented mansions in Miami and the Hamptons. (September 8, 2026)
