Your SBOM won't save you: Closing the provenance gap in software security

"The industry has spent five years building better autopsies. Now it needs to start building gates."

"Harvest now, decrypt later is a today problem": Collapsing uncertainty in quantum security

Q-Day - the moment when quantum computers will be able to crack traditional cryptography - may not be a notional future threat forever.

AI slop is the "ideal cover" for covert agent communications, researchers say

Bots can hide secret information that's invisible to most humans within LLM-generated "synthetic multimedia content".

"Where risk and invisibility collide": Mapping Shadow AI in the enterprise

"Employees are not trying to be reckless, but unmanaged AI creates a direct path for sensitive data and information to leave the business."

AI agents move into credit broking as regulators sharpen their knives

World's first Agentic Credit Broking Protocol sets a standard for financial services bots as they take on mission-critical roles in lending.

Russian cyber-spies target UK and European officials via messaging apps

High-risk figures warned to exercise extreme caution when using WhatsApp, Signal and other third-party applications.

From beerware to the chicken dance: The world's weirdest open source licenses

"It’s tempting to dismiss these licenses as curiosities - but they highlight a fundamental tension and a lesson for technical leaders."

Quantum attacks could crack cryptocurrency encryption in minutes, Google warns

Research sheds new light on Google’s decision to accelerate its shift to post-quantum cryptography.

Catching connected criminals: Exposing the networks driving modern fraud

Financial crime is now a complex web spun by coordinated networks—and investigators face a difficult task untangling it.

Google speeds up post-quantum migration to counter "harvest now, decrypt later" attacks

Traditional encryption may soon be trivial to crack - prompting adversaries to gather sensitive protected data they can access in future.

China’s Red Menshen “sleeper cell” spies caught hiding deep inside global telecoms networks

Rapid7 uncovers "ongoing" espionage campaign involving long-term persistence within highly sensitive communications environments.

Threat actors exploit identity at “industrial scale” as trust becomes the attack surface

Adversaries are pushing beyond the perimeter to exploit the trusted infrastructure that keeps global businesses running.