Nate Nelson

Researchers are calling attention to the risks inherent in automated network device provisioning, using a world-leading device manufacturer as a case study.

In the span of three weeks, OpenAI, Anthropic, and Meta have all disclosed AI agent sandbox escape events affecting real organizations.

In April I asked my own memory tool where I'd left off on a project I'd worked on that same...

The trust framework underlying Belgium's electronic ID system was fully compromised by severe vulnerabilities in a key browser extension, showcasing bigger problems with extensions in general.

Researchers discovered hackers-for-hire performing cyber espionage and financially motivated heists from the same Web panel.

One Caledonian government agency reported a breach, thanks to a third party that may have serviced other agencies as well.

One Caledonian government agency reported a breach, thanks to a third party that may have serviced other agencies as well.

A nation-state threat actor is picking on immature organizations run by the Taliban, but failing against more prepared government agencies in India.

The popular "Passportal" password manager, favored by MSPs and SMBs, remains risky even after its patch, thanks to its cloud-based design. Should these products stay away from the cloud entirely?

An advanced, multilingual malware family brings back a trick from yesteryear — screen hijacking — for effective password theft, along with a slew of novel features.