Microsoft Corp. announced today that it is expanding its bug bounty program with a new policy that brings all of its online services, including those supported by third-party and open-source components, into its scope by default. The update, introduced through a new “In Scope By Default” model, marks a significant change to Microsoft’s coordinated vulnerability ...

Data protection provider Commvault Systems Inc. today announced a new partnership and technology integration with privileged access management firm Delinea Inc. that connects the Commvault Cloud platform with Delinea’s Secret Server to help joint customers strengthen credential security, support compliance initiatives and streamline data recovery. The new partnership seeks to help with the issue whereby securing user credentials is ...

A new research report out today from cyber risk management company Bitsight Technologies Inc. warns about the security posture of the rapidly growing Model Context Protocol ecosystem by revealing that roughly 1,000 MCP servers are currently exposed on the public internet with no authorization controls in place. MCP is an open-source standard designed to let large language ...

A new report out today from endpoint security firm Morphisec Inc. details a previously undocumented malware family dubbed “PyStoreRAT” that abuses trusted open-source platforms and Windows scripting features to establish remote access on infected systems. A JavaScript-based remote access trojan, PyStoreRAT is delivered through lightweight Python and JavaScript loader stubs hidden inside GitHub-hosted repositories that appear to be legitimate ...

A new report out today from mobile security platform provider Zimperium Inc. warns of a new strain of Android malware that can give attackers the ability to seize near-total control of infected devices through a combination of social engineering, elevated permissions and real-time remote access. Dubbed “DroidLock,” the new malware is distributed through phishing websites that trick users into ...

Behavior-tracking software firm Amplitude Inc. today unveiled an expansion of its artificial intelligence analytics platform with the launch of Automated Insights, a new capability designed to replicate the work of expert analysts in minutes rather than days. The new service has been designed to assist with the issue where, when product teams detect unusual movements in their ...

Adobe Inc. reported better-than-expected earnings and revenue in its fiscal 2025 fourth quarter today and also impressed with a forecast ahead of analyst expectations. For the quarter that ended on Nov. 28, Adobe reported adjusted earnings per share of $5.50, up from $4.81 per share in the same quarter of the previous fiscal year, on ...

New research out today from cybersecurity company watchTowr Pte. Ltd. details a new class of vulnerabilities in the .NET Framework that can allow attackers to weaponize standard SOAP client proxies for arbitrary file writes and full remote code execution. Presented at Black Hat Europe 2025, the research paper “SOAPwn: Pwning .NET Framework Applications Through HTTP ...

Artificial intelligence-powered textile waste management platform SuperCircle revealed today that it has raised more than $24 million in new funding. The round will be used to accelerate development of its AI platform, expand supply chain integrations, grow its reverse-logistics and processing infrastructure, and more rapidly bring on more enterprise retail customers. Founded in 2018, SuperCircle offers ...

Software observability startup Lightrun Inc. today launched a new Model Context Protocol solution that offers fully integrated Runtime Context for artificial intelligence code-writing assistants. The new solution is pitched as a “step change” in autonomous code writing that gives tools such as Cursor and GitHub Copilot full visibility into how code behaves after deployment. In ...