News
Plain-English guides on web security, compliance, and keeping your clients protected.
Apple is expected to move toward faster, more frequent security updates as the gap between flaw disclosure and real-world exploitation continues to shrink. The shift reflects a broader concern across...
Read article →The FBI said it has seized hundreds of domains linked to NetNut, a residential proxy service tied by multiple security researchers to the Popa botnet. The operation also involved the IRS Criminal Inve...
Read article →Attackers associated with the so-called FortiBleed activity are reportedly turning unauthorized access to Fortinet firewalls into profit. According to the report, the operators are no longer just ente...
Read article →A malware family tied to the ToddyCat cyberespionage group has been seen using a new technique to quietly reach Gmail content through Google’s API, according to Kaspersky. The tool, called Umbrij, is...
Read article →A ransomware campaign is using straightforward social engineering tactics to trick small businesses into opening the door to an attack, according to security researchers. The operation has been seen i...
Read article →Researchers say last month’s FortiBleed campaign is more closely connected to the ransomware ecosystem than first thought, after finding evidence that one operator appears to have used affiliate acces...
Read article →Identity lifecycle management was built for people: employees who are hired, reassigned, and eventually offboarded through HR processes. As organizations deploy more autonomous AI agents, security tea...
Read article →CISA has placed a Microsoft SharePoint remote code execution flaw into its Known Exploited Vulnerabilities catalog after determining that the issue is being used in active attacks.The vulnerability, t...
Read article →Medtronic, the medical device maker known for pacemakers and insulin pumps, has told some patients that their personal and health information may have been accessed during a cyberattack earlier this y...
Read article →Security researchers at Sysdig say they have identified what appears to be the first ransomware operation executed from start to finish by an AI agent. The activity, which the company tracks under the...
Read article →India’s Ministry of Electronics and Information Technology has asked WhatsApp to justify its planned username feature, warning that the change could create new opportunities for fraud. The government...
Read article →A newly identified credential-theft operation known as FortiBleed has now been linked to the INC and Lynx ransomware ecosystems, suggesting the stolen access was being used to support later-stage intr...
Read article →