Updated continuously

The signal that matters.

Cutting through advisories, vendor PSIRTs, researcher write-ups, and the underground — correlated, deduped, and ranked so your team only sees what moves the needle.

Get the daily digest

Free · one email each morning

53,281stories tracked

Story velocity

6,490 sources2.0M refsLive

Exploitation dashboard — exploited and exploitable CVEs

Updated yesterday

Cybersecurity Regula…Privacy Surveillance…Cybercrime Service E…

White House Authorizes Vetted Private Firms for Cyber Operations Against Foreign Crime Gangs

The White House issued a presidential memorandum creating a federally supervised program that allows vetted U.S. private companies to support cyber operations against foreign cyber-enabled transnational criminal organizations. The framework will be managed by the National Coordination Center and jointly overseen by officials designated by the Department of Justice and Department of Homeland Security, with participating firms required to contract with DOJ or DHS, disclose relevant commercial ties, and potentially post a $1 million bond or escrow.

Timeline

3d agoPresident signs memorandum creating private cyber-operations program
4d agoWhite House issues memo authorizing private firms for cyber operations

Regulatory & Policy·38sources·Updated 4h ago

Latest

Post Quantum Cryptog…Standards Framework…

Ethereum Drops Poseidon Hash From Roadmap in Favor of SHA or BLAKE

Ethereum Foundation researcher Justin Drake said the Foundation is abandoning Poseidon as a candidate hash primitive for Ethereum layer 1 and is instead moving toward standard hashes such as SHA or BLAKE. The shift was not triggered by a practical break of deployed Poseidon parameters; rather, advances in binary-field SNARK systems including Binius and Flock have made proving standard hashes efficient enough that Ethereum no longer needs a SNARK-friendly hash optimized for older proving constraints.

Emerging Technology Risk

2·Updated 12h ago

Ai Platform SecurityOpen Source Dependen…+1

z.ai Unveils GLM-5.3 With Lower-Cost Security Scanning and OpenVuln Service

z.ai introduced GLM-5.3, an open-weight coding model positioned as a cybersecurity-capable successor to GLM-5.2, saying post-training with large-scale synthetic tasks improved both software development and security performance. The company said the model, developed with Chinese security researchers, helped uncover 2,436 previously unknown vulnerabilities across nearly 270 real-world projects, including more than 100 critical flaws affecting software such as the Linux kernel, WinRAR, Redis, and FFmpeg. z.ai also launched OpenVuln, a GitHub repository scanning service built around GLM-5.3, while delaying release of the model weights until further security evaluation and hardening are completed.

Emerging Technology Risk

3·Updated 21h ago

Critical Infrastruct…Cybersecurity Regula…+3

Senators Introduce Water Infrastructure Cybersecurity Bill After Utility Threat Warnings

Senators Adam Schiff and Amy Klobuchar introduced a comprehensive cybersecurity bill aimed at strengthening protections for U.S. water infrastructure after recent cyberattacks on water systems. The legislative push follows longstanding federal concern over the sector’s weak cyber posture, including a GAO finding that the EPA urgently needs a strategy to address cybersecurity risks across water and wastewater systems, underscoring gaps in oversight, coordination, and resilience for a critical public service.

Active Exploitation

3·Updated 22h ago

12 sections hidden

Find out if you're exposed

Don't read about it. Know when it affects you.

Mallory correlates every story on this page with your attack surface (assets, vendors, identities, subsidiaries) and surfaces a small set of evidence-based cases instead of 10,000 alerts.