A weakness in the configuration of OAuth credentials opens up a stored XSS vulnerability in the n8n automation platform, ...

A long-term Chinese cyber espionage operation that has been active since at least 2017 and has a count of at least 53 victims ...

A critical OpenClaw flaw allowed malicious websites to connect to locally running agents, brute-force passwords without ...

Ring Team Announces Significant New Contributions by Developer Youssef Saeed Youssef’s contributions, creativity, and ...

Staying resilient in 2026 will require leaders to reassess how they define risk, prioritize investments and measure readiness across the enterprise.

IntroductionThreat actors often take advantage of major global events to fuel interest in their malicious activities. Zscaler ThreatLabz is diligently tracking a surge in cybercriminal activity that ...

The global access control market was valued at USD 12.8 billion in 2025 and is estimated to reach USD 13.76 billion in 2026, with projections showing it will exceed USD 28.41 billion by 2035 at a ...

IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...

Oso reports on OpenClaw, an AI assistant that automates tasks but raises security concerns due to its access to sensitive data and external influences.

The World Wide Web Consortium has published a new Working Draft of Decentralized Identifiers (DIDs) v1.1, an update that tightens the way DID documents express cryptographic keys and verification ...

Employees are creating AI agents that can access sensitive data with little oversight. Okta’s Jack Hirsch explains the risks, ...

Seven Windows authentication paths bypass MFA protections, enabling credential attacks through AD, NTLM, Kerberos, RDP, SMB, and service accounts.