A number of serious Windows bugs still haven't made their way into criminal circles, but that won't remain the case forever — and time is running short before ZDI releases exploit details.

Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps. Also included: DR's podcast on the CISO & the SEC; breaking down CISA's Secure by Design Pledge; Singapore puts cloud providers on notice.

The improper input validation issue in Intel Neural Compressor enables remote attackers to execute arbitrary code on affected systems.

Most companies still can't determine whether a breach is material within the four days mandated by the SEC, skewing incident response.

Cybersecurity cannot be solely about defending against threats; it must also empower organizations with their data.

Companies must apply the lessons learned from securing the open source software supply chain to the code they're generating with AI.