Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

Plugging your name into a search engine is just the start. Learn where your sensitive info is hiding online—and the simple ...

City commissioners voted to sign an agreement with the Georgia Department of Transportation to clarify ownership of data gathered by Automated License Plate Recognition (ALPR) cameras in GDOT ...

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension ...

Researcher believes overprivileged Iterable creds exposed 8.8M customer records – and could have enabled mass deletion ...

Cybercriminals are increasingly targeting local data stored by AI coding agents, including Claude, Cline, Codex, Continue, ...

Python web scraping is demonstrated by extracting a real Wikipedia table containing the largest United States companies by ...

Chinese-speaking hackers exploited ownCloud and WordPress flaws to steal sensitive data from Philippine nuclear and naval organizations.

An AI-driven attack that compromised Asian government systems, cracked 85 accounts, and stole 2,500+ personnel records.

A Denver District Court judge set a process for Nine PBS to retrieve its archival data and programming from Iron Mountain Data Centers during a Wednesday hearing. The St. Louis station sued the ...

Sonatype Research Labs identified six npm packages delivering the same malicious payload: three hijacked legitimate packages and three additional malicious packages, tracked as sonatype-2026-005899 ...

A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service's Gremlin query sandbox and obtain full read and write access to databases across customer tenants, ...