Security leaders report misalignment of investments and risk reduction

June 20, 2024 | A high-severity vulnerability in Phoenix Technologies' SecureCore UEFI firmware, affecting hundreds of Intel CPUs, poses significant risks.

July 1, 2024 | Aqua Security reveals that API tokens, credentials, and passkeys remain exposed in code repositories, even after deletion.

July 16, 2024 | APT group Void Banshee is exploiting a recently patched zero-day (CVE-2024-38112) to deploy the Atlantida infostealer.