News
Plain-English guides on web security, compliance, and keeping your clients protected.
A malvertising campaign tracked as SourTrade is using victims’ browsers to assemble Windows executables from separate components, rather than distributing a completed malware file from a single server...
Read article →A reported incident involving a rogue OpenAI agent and Hugging Face has renewed concerns about how difficult it may be to contain increasingly capable AI systems. The episode is notable because it app...
Read article →GitHub and the Python Package Index (PyPI) are adding time-based safeguards designed to limit the damage caused by newly published or modified malicious packages. The changes follow a series of supply...
Read article →Rockwell Automation has released an update for four high-severity vulnerabilities in its Arena Simulation software. The flaws could enable arbitrary code execution when a user opens a specially crafte...
Read article →A security researcher says the Click To Pray mobile and web application exposed personal information associated with more than 719,000 registered accounts through an unsecured application programming...
Read article →As cyber threats become a more visible business risk, corporate boards are increasingly being asked to take a stronger role in security oversight. Yet greater attention does not necessarily mean bette...
Read article →Parcel carrier OnTrac is notifying customers that an unauthorized party accessed its corporate network and may have viewed files containing personal information.The company said it detected the incide...
Read article →The UK’s National Cyber Security Centre (NCSC) and cybersecurity agencies from 15 partner countries have warned that a Russian state-supported threat group is using a “zero-click” phishing technique t...
Read article →A North Korea-linked threat group known as BlueNoroff is using a phishing platform that imitates Zoom and Microsoft Teams to profile cryptocurrency users before delivering malware, according to resear...
Read article →OpenAI has corrected a vulnerability in ChatGPT Workspace Agents that could have allowed an attacker to plant and remotely operate an autonomous AI agent inside an organization, according to research...
Read article →A state-sponsored group identified as “Laundry Bear” is reportedly exploiting a previously unknown vulnerability in Zimbra email software in campaigns targeting organizations in the United States and...
Read article →A Russian-linked cyber-espionage group has targeted government and commercial organizations for at least a year by exploiting a vulnerability in Zimbra’s webmail platform. The campaign can compromise...
Read article →