News
Plain-English guides on web security, compliance, and keeping your clients protected.
A data-theft operation known as the “City-Forum” campaign has been active since at least March 2025, according to available reporting. The campaign has focused on organizations in multiple sectors and...
Read article →Cybercriminals are combining the SpyNote Android remote-access trojan with a newer NFC relay malware, WindRelay, to take control of victims’ phones, apply for loans, and use payment cards in fraudulen...
Read article →A vulnerability in Microsoft SharePoint that was patched in July is now being targeted in the wild, according to threat intelligence monitoring conducted after a public proof-of-concept exploit was re...
Read article →Signal has introduced Automatic Key Verification (AKV), a feature designed to help users detect attempts to redirect encrypted conversations to an impostor. The update strengthens the app’s existing s...
Read article →Microsoft’s August security update addresses 398 vulnerabilities across Windows and supported software, including one flaw that the company says is being actively exploited. The release also covers tw...
Read article →The UK National Cyber Security Centre (NCSC) has released a fictional worked example showing how organisations can apply its Secure Connectivity Principles for Operational Technology. The scenario fol...
Read article →Artificial intelligence is enabling development teams to produce software at a much higher volume and speed, but security processes may not be scaling at the same rate. A new webinar, The True Cost of...
Read article →New research describes a technique dubbed “GhostJacking,” in which attackers may exploit security alerts and blocked events to influence the behavior of AI agents. The findings point to weaknesses in...
Read article →A compromise of infrastructure used by WordPress developer BdThemes allowed attackers to tamper with a remote data feed and target administrator sessions on websites using the company’s plugins.Securi...
Read article →A series of smaller cybersecurity developments this week highlighted risks spanning artificial intelligence abuse, software supply chains, cloud data exposure and targeted social engineering.AI misuse...
Read article →Ransomware groups are increasingly selecting victims based on their influence over business decisions rather than targeting only senior executives or system administrators, according to research from...
Read article →Security researchers have identified two attack paths that could cause Atlassian’s Rovo AI assistant to send data accessible to a signed-in user to an attacker-controlled server. The findings were rep...
Read article →