News
Plain-English guides on web security, compliance, and keeping your clients protected.
Successful events often depend on what happens long before attendees arrive. Cybersecurity specialists say the most reliable way to keep an event running smoothly is to plan for digital risks early, u...
Read article →The UK’s National Cyber Security Centre has shared practical lessons from penetration testers working on critical national infrastructure (CNI), saying organisations can make life significantly harder...
Read article →A threat group believed to be linked to China has been tied to a recent intrusion campaign against organizations in Southeast Asia, with signs that at least 10 entities were affected. Among the target...
Read article →Security professionals appear to be losing confidence in fully automated penetration testing, according to a new report from offensive security firm Cobalt.The company’s 2026 State of Pentesting surve...
Read article →Security researchers are drawing attention to a new abuse pattern targeting AI-powered coding assistants and other autonomous agents. The technique, sometimes referred to as agentjacking, relies on pl...
Read article →Security researchers are warning that publicly accessible AI endpoints can become an easy entry point for attackers when they are left exposed on the internet. In many cases, no stolen credentials or...
Read article →Artificial intelligence is changing how security teams work, but it is not necessarily shrinking the field, according to Silverfort CISO John Paul Cunningham. In a recent "Heard it From a CISO" video,...
Read article →Researchers from Microsoft and Trend Micro say they have observed separate but related phishing campaigns aimed at hospitality organizations in Europe and Asia. The attacks rely on malicious ZIP archi...
Read article →Huntress CEO Kyle Hanslovan said the company has reviewed “questionable, long-term threat actor communications” involving a current employee and a ransomware operator, but concluded that the conduct d...
Read article →Security teams are paying closer attention to a growing risk in modern automation: workflows created by AI tools that function correctly, but are not fully understood by the people relying on them. Th...
Read article →Microsoft is rolling out a new mechanism in Teams designed to reduce the chance of automated services entering meetings without permission.The company said the change was prompted by situations in whi...
Read article →India’s central bank moved in 2025 to strengthen trust in online banking by requiring domestic banks to use the .bank.in namespace for their web presence. The goal was to make phishing and impersonati...
Read article →