How Storm-2949 turned a compromised identity into a cloud-wide breach

EU CRA mandatory vulnerability reporting enters into force September 11, 2026 — what the 24-hour obligation requires

Interesting- What LLM vuln research looks like

Using AI to Secure Its Generated Code Is a Ponzi Scheme

Digital Trap: Iran Uses Selective Internet Restoration to Track and Arrest January Protesters

A practical checklist for evaluating npm packages (supply chain attacks, slopsquatting, etc.)

OffensiveCon26 YouTube Playlist released