News
Plain-English guides on web security, compliance, and keeping your clients protected.
Signal has introduced Automatic Key Verification (AKV), a feature designed to help users detect attempts to redirect encrypted conversations to an impostor. The update strengthens the app’s existing s...
Read article →Microsoft’s August security update addresses 398 vulnerabilities across Windows and supported software, including one flaw that the company says is being actively exploited. The release also covers tw...
Read article →The UK National Cyber Security Centre (NCSC) has released a fictional worked example showing how organisations can apply its Secure Connectivity Principles for Operational Technology. The scenario fol...
Read article →Artificial intelligence is enabling development teams to produce software at a much higher volume and speed, but security processes may not be scaling at the same rate. A new webinar, The True Cost of...
Read article →New research describes a technique dubbed “GhostJacking,” in which attackers may exploit security alerts and blocked events to influence the behavior of AI agents. The findings point to weaknesses in...
Read article →A compromise of infrastructure used by WordPress developer BdThemes allowed attackers to tamper with a remote data feed and target administrator sessions on websites using the company’s plugins.Securi...
Read article →A series of smaller cybersecurity developments this week highlighted risks spanning artificial intelligence abuse, software supply chains, cloud data exposure and targeted social engineering.AI misuse...
Read article →Ransomware groups are increasingly selecting victims based on their influence over business decisions rather than targeting only senior executives or system administrators, according to research from...
Read article →Security researchers have identified two attack paths that could cause Atlassian’s Rovo AI assistant to send data accessible to a signed-in user to an attacker-controlled server. The findings were rep...
Read article →Cybercrime remains difficult to contain not only because attackers continue to refine their methods, but also because the organizations responding to them often lack seamless coordination. Threat acto...
Read article →Attackers linked to the Head Mare hacktivist group have compromised unpatched TrueConf video-conferencing servers and used them to distribute tampered client installers, according to research from Kas...
Read article →Researchers have disclosed a one-click attack technique that could have caused Atlassian’s Rovo enterprise AI assistant to retrieve and disclose sensitive information from connected business systems....
Read article →