News
Plain-English guides on web security, compliance, and keeping your clients protected.
Security researchers say attackers are abusing Microsoft Teams voice calls to pose as internal IT staff and convince employees to install remote-access software, a tactic that can end with the EtherRA...
Read article →Sainsbury's, the UK's second-largest supermarket chain, is preparing to expand its use of facial recognition technology in stores as part of efforts to reduce shoplifting. The move has drawn criticism...
Read article →Security researchers at Shandong University have demonstrated a new covert channel, dubbed TrojPix, that can leak data from air-gapped computers by manipulating how pixels are displayed on the screen....
Read article →Cybersecurity researchers have identified a new remote access trojan called QuimaRAT that is written in Java and designed to operate across Windows, Linux, and macOS systems. According to an analysis...
Read article →Security researchers have disclosed a flaw in Opera GX, the gaming-oriented version of Opera’s browser, that could let a malicious website install a mod without user approval and then use it to extrac...
Read article →Moody Bible Institute (MBI) has confirmed that a cyberattack led to the exposure of personal information tied to more than 2.3 million people, according to breach notification data and reporting on th...
Read article →Researchers at the Hong Kong University of Science and Technology say malicious add-on “skills” for AI coding agents can be modified to bypass static security scanners without breaking their behavior....
Read article →The source code for KSOS, an early security-focused Unix-like operating system funded by the U.S. Department of Defense in the late 1970s and 1980s, has been made publicly available through The Unix H...
Read article →Financial institutions continue to allow some customers to log in without multi-factor authentication, a gap that can make account takeovers easier for criminals, according to a recent account of a re...
Read article →A U.S. government organization appears to have paid roughly $1 million after attackers threatened to publish stolen data, according to a new case study from Ransom-ISAC researcher Rakesh Krishnan. The...
Read article →Researchers say a North Korean-linked threat group tied to the long-running Contagious Interview campaign has released 108 distinct malicious packages and browser extensions across several software ec...
Read article →New academic research is casting doubt on a core trust mechanism used in confidential computing, a technology that vendors and policymakers have promoted as a foundation for sovereign cloud services a...
Read article →