RFC 3161 Trusted Timestamps: Compliance Evidence an Assessor Can Verify Offline, Without the Vendor 
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts 
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign 
Your Cloud Scan Now Reports What It Did Not Check: Inside NSAuditor AI Enterprise 0.32.11 
Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses 
RFC 3161 Trusted Timestamps: Compliance Evidence an Assessor Can Verify Offline, Without the Vendor
Every pre-audit evidence pack arrives with an asterisk the vendor rarely prints: trust us that this is what the scan...
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
What's new: A new vulnerability, tracked as CVE-2026-64561, has been discovered in the KVM (Kernel-based Virtual Machine) that could allow...
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign
What's new: TeamPCP, a threat actor linked to various cybercrime activities since 2020, has been identified as responsible for attacks...
Your Cloud Scan Now Reports What It Did Not Check: Inside NSAuditor AI Enterprise 0.32.11
Ask any experienced assessor what separates a scan report they can rely on from one they cannot, and the answer...
Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses
What's new: Researchers have identified a new technique called NullReceiver, used in two trojanized npm packages, "bianira-ui" and "fluid-type-ui," which...