CVE-2025-22230 is described as an “authentication bypass vulnerability” by Broadcom, allowing hackers to perform high-privilege operations without the necessary credentials.
Wow, what year is this already? Hands free cross-country driving was promised by the CEO of Tesla to be solved by 2017, along with boasts of delivering the safest car on the road because it won’t even crash. And yet here’s yet another tragi…
Per my earlier post about Tesla safety marketing, their FSD is only able to go 200 miles (maybe 400 at the most) without an intervention. So, here’s an interesting update on a 2026 model. Elon Musk has said his cars just won’t crash in 2025…
Security researchers at ReversingLabs have discovered a new malware campaign on the npm package repository, revealing a new…
Two recent posts by well-known payment processing voices highlight contrasting approaches to the future of digital wallets. David Birch, a digital financial services thought-leader, and the EU Digital Wallet Consortium (EWC) have each presented very di…
Researchers have uncovered a critical vulnerability (CVE-2025-29927) in Next.js middleware, allowing authorization bypass. Learn about the exploit and fixes.
Since inception, Cisco XDR has followed the Open XDR philosophy. We integrate telemetry and data from dozens of Cisco and third-party security solutions.
The recent Russian cyberattack on Ukraine’s railway infrastructure demonstrates a fundamental security principle: distributed, open systems consistently prove more resilient than centralized, closed ones. This principle, though counterintuitive t…
The Aerospace Division of Iran’s Islamic Revolution Guard Corps (IRGC) has unveiled a “missile megacity”— one of its largest underground such facilities.
I co-authored a paper on data integrity published by the Association for Computing Machinery (ACM), “the world’s largest educational and scientific computing society”. New integrity-focused standards are necessary to enable the truste…