Incidents
What happened, what is confirmed, and what to do.
Spies used AI-written code to break into government Linux servers
A borrowed certificate could unlock whole LXD clusters. Update now
Ivanti's VPN was attacked before the patch existed. Here is what to check
PHP2Shell: two critical PHP flaws are being exploited. Patch now
Post-mortem: how weak keys at eMudhra shook the web's trust system
Your email was in a data breach. Here's what actually matters next
CVE, CVSS, KEV: the three labels that decide what to patch first