Why the Elasticsearch Platform is the missing piece in your AI stack
Most enterprise AI initiatives stitch together four to five systems for memory, search, and state. The Elasticsearch Platform handles all of it in one...
Addi – 34,532,941 breached accounts
In March 2026, the Colombian fintech company Addi identified unauthorised activity on its platform and advised customers that "it is possible that your personal...
Microsoft May security patch fails for some due to boot partition size glitch
“Something didn’t go as planned. Undoing changes.” That’s all the clue some Windows 11 users will get when Microsoft’s May...
Apple’s Siri Revamp May Add Auto-Deleting Chats
Apple’s reported Siri revamp may add auto-deleting AI chats as the company prepares a privacy-focused software push at WWDC 2026.
The post Apple’s Siri Revamp...
Hackers Actively Exploiting Critical NGINX RCE Vulnerability in the Wild
Hackers are wasting no time exploiting a newly disclosed critical vulnerability in NGINX, with security researchers already observing real-world attacks just days after its...
18th May – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 18th May, please download our Threat Intelligence Bulletin.
TOP ATTACKS AND BREACHES
Vodafone, a major...
Interpol Launches Sweeping Cybercrime Crackdown in MENA Region
Over 200 people were arrested in an anti-cybercrime operation that spanned 13 countries across the Middle East and North Africa - Read more
CVE-2026-32185 Microsoft Teams Spoofing Vulnerability
The security update for Microsoft Teams for Android is not immediately available. Customers running affected Microsoft Teams for would need to install the update...
IT threat evolution in Q1 2026. Mobile statistics
IT threat evolution in Q1 2026. Mobile statistics
IT threat evolution in Q1 2026. Non-mobile statistics
In the third quarter of 2025, we updated the methodology...
Dify: When Your AI Platform Becomes the Attack Surface
Executive Summary
We identified a couple of vulnerabilities in AI automation platform Dify resulting in cross-tenant sensitive information disclosure and one-click account takeover. These findings reinforce the pattern we documented in our previous n8n blogpost: even though AI automation platforms are increasingly becoming integration hubs for complex workflows, their security...
Latest article
Hackers Publish Malicious Python Package Mimicking Legitimate Parsimonious Parser
A deceptive Python package quietly made its way into the PyPI repository, putting thousands of developers at risk before it was caught and removed....
Microsoft identifies seven new ways AI agents can be hacked
Microsoft has identified seven new failure modes in agentic AI systems, in addition to those it identified last year in...
Building secure B2C applications with fine-grained access control using Amazon Cognito and Amazon Verified...
Modern web applications require robust security controls to protect user data and application resources. Authentication and authorization are two fundamental pillars of application security...
3 Principles to Safely Scale Agentic AI
- Read more
