News
Plain-English guides on web security, compliance, and keeping your clients protected.
Adobe has released security updates for a set of high-risk flaws in ColdFusion and Campaign Classic, including several issues rated CVSS 10.0 that could allow remote code execution on vulnerable syste...
Read article →Security researchers say phishing operations are becoming more adaptive, using basic browser and device details to decide which malicious payload to deliver. By inspecting user-agent information, atta...
Read article →Researchers have disclosed two high-severity vulnerabilities in Cursor, an AI-assisted code editor, that could let a malicious prompt push the agent out of its sandbox and execute commands on a develo...
Read article →Security researchers say a once-novel social engineering method known as ClickFix is rapidly becoming a common way to deliver malware, signaling a broader shift in how attackers trick victims into inf...
Read article →Security researchers are warning that a newly disclosed critical vulnerability in Progress Kemp LoadMaster is already drawing attack attempts in the wild. According to eSentire’s Threat Response Unit...
Read article →Pentera Labs says its red team was able to turn Anthropic’s Claude Desktop into an unwitting participant in an intrusion, using a compromised email account and the app’s synchronization behavior to st...
Read article →Researchers at Check Point say they have identified a malware sample generated with DeepSeek that blends a browser-only ransomware idea with a legitimate Chromium feature, creating a working attack ch...
Read article →As organizations expand, the volume of security telemetry can grow faster than teams can manage it. What begins as standard firewall logging can evolve into a storage, processing, and alerting burden...
Read article →Security researchers are warning about a new supply chain concern they describe as phantom squatting, a tactic that takes advantage of large language models’ tendency to invent web domains for real co...
Read article →Successful events often depend on what happens long before attendees arrive. Cybersecurity specialists say the most reliable way to keep an event running smoothly is to plan for digital risks early, u...
Read article →The UK’s National Cyber Security Centre has shared practical lessons from penetration testers working on critical national infrastructure (CNI), saying organisations can make life significantly harder...
Read article →A threat group believed to be linked to China has been tied to a recent intrusion campaign against organizations in Southeast Asia, with signs that at least 10 entities were affected. Among the target...
Read article →