News
Plain-English guides on web security, compliance, and keeping your clients protected.
Cybersecurity conditions in Australia appear to be improving for individuals and larger institutions, but the responsibility for keeping systems secure is increasingly falling on small and medium-size...
Read article →This week’s threat landscape highlighted a familiar theme: attackers continue to exploit small gaps in trusted systems, from email services and AI sandboxes to phishing infrastructure and remote acces...
Read article →Sysdig threat researchers have described what they say is the first documented ransomware operation in which a large language model, rather than a human operator, handled the full attack chain from in...
Read article →Apple is expected to move toward faster, more frequent security updates as the gap between flaw disclosure and real-world exploitation continues to shrink. The shift reflects a broader concern across...
Read article →The FBI said it has seized hundreds of domains linked to NetNut, a residential proxy service tied by multiple security researchers to the Popa botnet. The operation also involved the IRS Criminal Inve...
Read article →Attackers associated with the so-called FortiBleed activity are reportedly turning unauthorized access to Fortinet firewalls into profit. According to the report, the operators are no longer just ente...
Read article →A malware family tied to the ToddyCat cyberespionage group has been seen using a new technique to quietly reach Gmail content through Google’s API, according to Kaspersky. The tool, called Umbrij, is...
Read article →A ransomware campaign is using straightforward social engineering tactics to trick small businesses into opening the door to an attack, according to security researchers. The operation has been seen i...
Read article →Researchers say last month’s FortiBleed campaign is more closely connected to the ransomware ecosystem than first thought, after finding evidence that one operator appears to have used affiliate acces...
Read article →Identity lifecycle management was built for people: employees who are hired, reassigned, and eventually offboarded through HR processes. As organizations deploy more autonomous AI agents, security tea...
Read article →CISA has placed a Microsoft SharePoint remote code execution flaw into its Known Exploited Vulnerabilities catalog after determining that the issue is being used in active attacks.The vulnerability, t...
Read article →Medtronic, the medical device maker known for pacemakers and insulin pumps, has told some patients that their personal and health information may have been accessed during a cyberattack earlier this y...
Read article →