Security
5,347 items in 29 lists
-
Cybersecurity Ventures cybersecurityventures.com
Cybersecurity Market Report Q4 (2025) - Analyzes the global cybersecurity market trajectory, projecting that annual spending will reach one trillion dollars by 2031 due to the expanding threat landscape across digitized infrastructure and industrial systems. Key findings…
-
Erosion of Trust: Unmasking Supply Chain Vulnerabilities in the Terraform Registry boostsecurity.io
Terraform modules are not protected by the Dependency Lock File, consequently, a seemingly harmless module could potentially introduce malicious code.
-
Artic Wolf Labs cybersecurity.arcticwolf.com
The State Of Cybersecurity (2025) - Analyzes the 2025 cybersecurity landscape, highlighting a pivotal shift in executive priorities and incident response preparedness. Key findings reveal that artificial intelligence has displaced ransomware as the top security concern for 29…
-
The massive bug at the heart of the npm ecosystem blog.vlt.sh
NPM Manifest Confusion.
-
Cyber Proof cyberproof.com
Mid Year Cyber Threat Landscape (2025) - Analyzes the H1 2025 cyber threat landscape, focusing on the surge of AI-powered ransomware operations, intensified targeting of the manufacturing sector, and strategic shifts in supply chain infiltration. Key insights include a 60…
-
Token-Spray blog.projectdiscovery.io
Automate token validation using Nuclei.
-
CyberProof cyberproof.com
Global Threat Intelligence Report (2026) - Investigates the evolving landscape of global cyber threats in 2025, focusing on the rapid weaponization of vulnerabilities and the strategic shift toward identity abuse within business-critical systems. Key findings reveal that…
-
Hacking Terraform State for Privilege Escalation blog.plerion.com
Modifying a Terraform state file allows attackers to delete infrastructure or execute code via custom providers.
-
Cyber Peace Institute cyberpeaceinstitute.org
A non-profit organization focused on reducing the impact of cyberattacks on civilians and promoting peace in cyberspace.
-
Introducing MavenGate: a supply chain attack method for Java and Android applications blog.oversecured.com
Many public and popular libraries that have long been abandoned are still being used in huge projects. Access to projects can be hijacked through domain name purchases.
-
Cyber Int cyberint.com
Travel Threat Landscape Report (2025) - Analyzes the cyber threat landscape targeting the travel and tour operations industry, highlighting recent cyber events and future predictions.
-
Thousands of images on Docker Hub leak auth secrets, private keys bleepingcomputer.com
Researchers found thousands of Docker Hub images leaking private keys and API secrets.
-
UKCyber cyberexchange.uk.net
Security Sectoral Analysis Report (2025) - Analyzes the economic performance and growth trajectory of the United Kingdom cyber security sector through a comprehensive assessment of 2,165 active firms. Findings indicate robust expansion across the industry, with total annual…
-
Gitloker attacks abuse GitHub notifications to push malicious OAuth apps bleepingcomputer.com
Attackers use fake GitHub notifications to trick users into authorizing malicious OAuth apps that steal repo access.
-
GitHub comments abused to push malware via Microsoft repo URLs bleepingcomputer.com
Hidden GitHub comment link.
-
Kiteworks cyberdefensewire.com
Data Security Compliance Risk Forecast (2026) - Examines the evolving landscape of enterprise data security and artificial intelligence governance, highlighting critical gaps in organizational readiness as agentic systems move into production. Key findings reveal that 60…
-
CyberArk cyberark.com
State of Machine Identity Security Report (2025) - Focuses on the critical and often-overlooked area of machine identity security. Key findings reveal that a significant percentage of organizations are concerned about risks stemming from compromised machine identities and…
-
Employee Personal GitHub Repos Expose Internal Azure and Red Hat Secrets aquasec.com
Employee's personal GitHub repos expose internal Azure & Red Hat secrets.
-
CyberArk cyberark.com
Identity Security Threat Landscape Report (2025) - Examines the impact of cyberattacks on identity, including cyber debt, GenAI, machine identities, and third- and fourth-party risks. Key findings reveal a growing cyber debt fueled by these factors, highlighting the need for…
-
GitHub Dataset Research Reveals Millions Potentially Vulnerable to RepoJacking aquasec.com
Millions of GitHub repos are vulnerable to RepoJacking due to org renames, leading to potential code execution.
-
Can You Trust Your VSCode Extensions? aquasec.com
Impersonate popular VSCode extensions and trick unknowing developers into downloading them.
-
Australia cyber.gov.au
Securing Space Cyber Security for Low Earth Orbit Satellite Communications (2026) - Examines the cyber security risks and mitigation strategies associated with low earth orbit satellite communications across space, ground, and user segments. Key findings highlight that 100…
-
Fortune 500 at Risk: 250M Artifacts Exposed via Misconfigured Registries aquasec.com
Misconfigured public registries with software artifacts containing sensitive proprietary code and secrets.
-
Australian Cyber Security Centre (ACSC) cyber.gov.au
Provides cyber security advice and support to Australian businesses and individuals.
-
Invisible Ghost: Alarming Vulnerability in GitHub Copilot apexhq.ai
Using hidden Unicode characters to manipulate GitHub Copilot's suggestions.
-
Canada cyber.gc.ca
National Cyber Threat Assessment (2025) - Analyzes the cyber threats facing Canada from state adversaries and cybercrime, forecasting trends up to 2026. The report highlights the increasing aggressiveness of state adversaries in cyberspace, the resilience of cybercrime due to…
-
Canadian Centre for Cyber Security cyber.gc.ca
Canada's national authority on cybersecurity.
-
The Monsters in Your Build Cache – GitHub Actions Cache Poisoning adnanthekhan.com
Allows attackers to compromise workflows even with limited permissions by exploiting vulnerabilities or dependency flaws, attackers steal cache tokens, fill the cache to force evictions, and replace legitimate entries with malicious code.
-
MITRE ctid.mitre.org
Threat Informed Defense Report (2026) - Examines the state of threat-informed defense and industry adoption of the MITRE framework through a comprehensive survey of security professionals. Key findings reveal that while 82 percent of respondents know about the framework, only 8…
-
Center for Strategic and International Studies (CSIS) csis.org
A think tank with a Technology Policy Program that conducts research and provides insights into technology and cybersecurity policies.
-
CSC cscdbs.com
The Chief Information Security Officer Outlook (2025) - Analyzes the cybersecurity concerns of CISOs in 2025, highlighting the increasing complexity and intensity of threats, particularly domain-related attacks.
-
Singapore Cyber Security Agency (CSA) csa.gov.sg
Singapore's national agency overseeing cybersecurity strategy and development.
-
Crowd Strike crowdstrike.com
SaaS Security Posture Management (2025) - Analyizes the 2024 SaaS Security Posture Management market, benchmarking companies' innovation and growth potential. Key findings highlight a competitive landscape with significant growth opportunities and best practices for companies…
-
One Supply Chain Attack to Rule Them All – Poisoning GitHub's Runner Images adnanthekhan.com
A critical vulnerability in GitHub Actions, involving a misconfigured self-hosted runner in the actions/runner-images repository, allowed potential compromise of all GitHub and Azure hosted runner images.
-
Crowd Strike crowdstrike.com
Threat Hunting Report (2026) - Examines the 2026 threat landscape and frontline hunting observations to highlight how adversaries exploit trust, software supply chains, and emerging artificial intelligence attack surfaces. Key findings reveal that 88 percent of vulnerability…
-
Elpaccto2 cristosvelasco.de
Weaponizing AI (2025) - Examines the integration of artificial intelligence within organized crime networks and the resulting challenges for law enforcement agencies across Europe and Latin America. Criminal organizations are increasingly leveraging generative models to…
-
Thales cpl.thalesgroup.com
Data-Threat-Report (2026) - Analyzes security findings and threat trends reported by Thales for 2026, examining key attack patterns, vulnerability data, and defensive recommendations drawn from data collected across hundreds of security practitioners. Findings span 10 or more…
-
Visa corporate.visa.com
Biannual Threats Report (2025) - Analyzes the payments ecosystem's threat landscape, focusing on evolving fraud tactics and scams. Key insights reveal a significant increase in ransomware and data breach incidents, alongside sophisticated fraud schemes leveraging malicious…
-
Contrast Security contrastsecurity.com
Software Under Siege (2025) - Highlights the increasing prevalence and impact of application-layer attacks targeting custom code, APIs, and application logic. The report reveals that applications face an average of 81 confirmed attacks per month, coupled with nearly 30 serious…
-
Salt content.salt.security
State Of API Security (2025) - Highlights the persistent challenges and evolving landscape of API security, driven by rapid digital transformation and cloud migration. Despite widespread API adoption and a nearly universal encounter with security issues, many organizations…
-
Salt content.salt.security
CISO and CIO Investment Priorities (2025) - Surveys key cybersecurity investment priorities for CISOs and CIOs in 2025, as detailed in a white paper by Osterman Research and sponsored by Salt Security. Key findings highlight shifts in priorities based on evolving threat…
-
NAIC content.naic.org
Cybersecurity Insurance Report (2025) - Analyzes the financial performance and operational trends of the United States cybersecurity insurance market using annual regulatory filing data and industry statistics. Key findings reveal that direct written premiums contracted by 7…
-
EuropeanTelcoISAC connecteurope.org
Security Landscape (2026) - Surveys the evolving cybersecurity landscape and strategic priorities for European telecommunications providers in 2026. Key findings reveal the landscape comprises eight threats, one distinct opportunity, and one combined development, driven.
-
ConnectEU connecteurope.org
State of Digital Communications (2026) - Examines the state of the European digital communications ecosystem, highlighting significant gaps in infrastructure investment and global competitiveness. Key findings reveal that while 5G coverage reached 94.9 percent of the population…
-
CompTIA comptia.org
State of the Tech Workforce (2026) - Analyzes the state of the United States technology workforce by examining employment trends, economic impact, and the integration of artificial intelligence across various industry sectors. Key findings indicate that net tech employment…
-
CompTIA comptia.org
State of Cybersecurity (2025) - Analyzes the current state of cybersecurity, focusing on organizational priorities, incident impact, and workforce development needs. Key findings reveal that cybersecurity is a high priority for 59% of organizations, yet 56% experienced…
-
Allianz commercial.allianz.com
Commercial Directors and Officers Insurance Insights (2026) - Examines the evolving landscape of directors and officers liability, highlighting how geopolitical instability, cyber threats, and artificial intelligence are driving increased litigation and regulatory scrutiny. Key…
-
Allianz commercial.allianz.com
Risk Barometer (2026) - Investigates the primary global business risks for 2026 by surveying 3,338 respondents across 97 countries to identify emerging threats and organizational vulnerabilities. Cyber incidents remain the leading global concern for the fifth consecutive year…
-
Allianz commercial.allianz.com
Commercial Cyber Security Trends (2025) - Examines the evolving landscape of cyber security resilience, focusing on the integration of artificial intelligence and the impact of stringent regulatory frameworks like the Digital Operational Resilience Act. Key findings indicate…
-
Cogility cogility.com
Insider Risk Report (2025) - Examines the state of insider risk management and modern data security challenges across corporate networks. Key findings reveal that 92 percent of recent incidents lacked proper access controls, while 96 percent of organizations feel confident…
- next page of items loading…
