Incident metrics, including the number of breaches and unauthorized access attempts. The meantime to detect (MTTD) and respond (MTTR) to security issues and the speed of identifying and resolving threats. Pass/fail rates for GDPR, HIPAA, and other compliance requirements. Vulnerability metrics, including open vulnerabilities and patching frequency. Training completion, such as the percentage of staff trained on security protocols. The percent of sensitive data encrypted. Access control metrics for addressing least-privilege access. Percentage of data…

We are announcing the upcoming deprecation of QEMU as a virtualization option for Docker Desktop on Apple Silicon Macs. After serving as our legacy virtualization solution during the early transition to Apple Silicon, QEMU will be fully deprecated 90 days from today, on July 14, 2025. This deprecation does not affect QEMU’s role in emulating non-native architectures for multi-platform builds. By moving to Apple Virtualization Framework or Docker VMM, you will ensure optimal performance. Why…

We’ve spent months analyzing how AI-powered coding assistants like GitHub Copilot handle security risks. The results? Disturbing. The Hidden Risks of AI Code Assistants GitHub Copilot is marketed as a productivity tool for developers, helping them write code faster. However, our vulnerabilities researcher, Fufu Shpigelman, uncovered vulnerabilities that expose a fundamental flaw: guardrails that rely solely on filtering user prompts are easily bypassed. Attackers don’t need complex exploits—they just need the right words. Affirmation Jailbreak:…

VPN technologies have long been the backbone of remote access, but according to new ThreatLabz research, the security risks and performance challenges of VPNs may be rapidly changing the status quo for enterprises. The Zscaler ThreatLabz 2025 VPN Risk Report with Cybersecurity Insiders draws on the insights of more than 600 IT and security professionals on the growing risks and operational challenges posed by VPNs. It reveals that enterprises are actively grappling with the security…

If you are a developer working on cryptocurrency projects, beware of people trying to hire you on LinkedIn – they could be North Korean hackers. In an April 14 report, Unit 42, Palo Alto Networks’ research branch, shared new findings about Slow Pisces, a hacking group affiliated with the North Korean regime. In a new malicious campaign that started in 2024, the group has been posing as recruiters on LinkedIn, targeting developers of cryptocurrency projects…