A new initiative from cybersecurity firm Chainguard is tackling a growing crisis in open-source software. The EmeritOSS program offers “sustainable stewardship” for mature projects that have lost their maintainers, focusing on security patches and stability over new features.
Microsoft claimed to have fixed a Windows 11 security vulnerability on November 12th. A week later, Google’s Project Zero team published a detailed analysis showing the patch was incomplete, but Microsoft has yet to respond or acknowledge the issue.
Microsoft has confirmed that its December 2025 security updates are causing major disruptions in enterprise environments. The updates are breaking Microsoft Message Queuing (MSMQ) and causing IIS websites to fail. The company is telling IT administrators to contact support directly for temporary fix
Microsoft has confirmed its December 2025 security update breaks Message Queuing (MSMQ) on older Windows systems. The issue, caused by folder permission changes, halts queues and generates misleading errors. There’s no official fix, only workarounds that compromise security.
Mixpanel is pushing back against Pornhub’s claim that a recent breach of user data originated from the analytics provider. The company says the data was last accessed by a legitimate Pornhub employee account in 2023, suggesting an insider issue. The extortion group ShinyHunters is claiming responsib
Google is discontinuing its dark web report tool, a feature that scanned for users’ leaked personal data. The company says the alerts weren’t actionable enough. It will be fully shut down by February 16, 2026.
A cybersecurity incident has led to the theft of over 200 million records detailing the private activity of Pornhub Premium users. The data, allegedly stolen from analytics provider Mixpanel, is now in the hands of the ShinyHunters cybercrime group. This breach could surpass the infamous 2016 Adult
Executives from IBM, SAS, Stability AI, and others shared exclusive 2026 predictions with TechRepublic. The consensus is that scale will force a reckoning, pushing companies toward specialized tools, greater observability, and a new era of cloud autonomy. The flashy AI demos will fade, replaced by a
India’s tech ministry has directed VPN providers to block access to websites that unlawfully expose citizens’ personal data. The order, citing the IT Act 2000 and IT Rules 2021, fundamentally conflicts with how privacy-focused VPNs operate.
LastPass has been fined £1.2 million by the UK’s Information Commissioner’s Office for a 2022 data breach. The regulator says the company failed to protect a backup database containing info on 1.6 million UK users. While passwords weren’t decrypted, the fine is a major blow to trust.
