News
Plain-English guides on web security, compliance, and keeping your clients protected.
Security professionals appear to be losing confidence in fully automated penetration testing, according to a new report from offensive security firm Cobalt.The company’s 2026 State of Pentesting surve...
Read article →Security researchers are drawing attention to a new abuse pattern targeting AI-powered coding assistants and other autonomous agents. The technique, sometimes referred to as agentjacking, relies on pl...
Read article →Security researchers are warning that publicly accessible AI endpoints can become an easy entry point for attackers when they are left exposed on the internet. In many cases, no stolen credentials or...
Read article →Artificial intelligence is changing how security teams work, but it is not necessarily shrinking the field, according to Silverfort CISO John Paul Cunningham. In a recent "Heard it From a CISO" video,...
Read article →Researchers from Microsoft and Trend Micro say they have observed separate but related phishing campaigns aimed at hospitality organizations in Europe and Asia. The attacks rely on malicious ZIP archi...
Read article →Huntress CEO Kyle Hanslovan said the company has reviewed “questionable, long-term threat actor communications” involving a current employee and a ransomware operator, but concluded that the conduct d...
Read article →Security teams are paying closer attention to a growing risk in modern automation: workflows created by AI tools that function correctly, but are not fully understood by the people relying on them. Th...
Read article →Microsoft is rolling out a new mechanism in Teams designed to reduce the chance of automated services entering meetings without permission.The company said the change was prompted by situations in whi...
Read article →India’s central bank moved in 2025 to strengthen trust in online banking by requiring domestic banks to use the .bank.in namespace for their web presence. The goal was to make phishing and impersonati...
Read article →Security researchers have reported a new way to mislead large language models into ignoring safety boundaries by taking advantage of how models interpret role-based prompts. The work suggests that cur...
Read article →Russian influence activity is increasingly shifting away from its near-exclusive emphasis on Ukraine and back toward the United States and Europe, according to a new report from Google Threat Intellig...
Read article →The National Institute of Standards and Technology has reduced the number of CVEs it reviews in depth, a change that researchers say has affected both the reach and quality of its vulnerability enrich...
Read article →