There was much to see at RSAC 2025. Read the recap about a few highlights from the expo floor.
The summit will take place 18-21 June 2025 in Brussels, Belgium. Here’s why you should make it a priority to attend.
How can we determine whether an enclosure suits the industrial environment in which it is deployed?
A security lapse at xAI, led to the exposure of a private API key on GitHub by a company employee. The leaked credential, discovered by Philippe Caturegli and validated by GitGuardian, provided...
Security leaders at Mandiant and Google Cloud say nearly every major company has hired or received applications from North Korean nationals working on behalf of the country’s regime. The post...
Security leaders at Mandiant and Google Cloud say nearly every major company has hired or received applications from North Korean nationals working on behalf of the country’s regime. The post...
A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire...
As the field of artificial intelligence (AI) continues to evolve at a rapid pace, new research has found how techniques that render the Model Context Protocol (MCP) susceptible to prompt injection...
A China-aligned APT threat actor named "TheWizards" abuses an IPv6 networking feature to launch adversary-in-the-middle (AitM) attacks that hijack software updates to install Windows malware. [...]
Staffers on the House Committee on Homeland Security indicate that workforce challenges, both within government and the private sector, demand immediate attention. The post Congressional officials...
The remarks came at a House subcommittee hearing where the Salt Typhoon breaches were fresh on lawmakers’ minds. The post Tariffs could slow replacement of telecom networks, according to industry...
US and Greek arrests expose 764 network’s global child abuse ring. Leaders face life for orchestrating violent exploitation…
A new study found that code generated by AI is more likely to contain made-up information that can be used to trick software into interacting with malicious code.
Two alleged victims came forward claiming they received a spyware notification from Apple.
Nation-state threat actors are using generative AI tools to refine their attack techniques, but they aren’t yet using GenAI to create new attack vectors, according to a presentation at this week’s...
Pinterest has a plan to fix its AI mess.
France accuses Russia’s APT28 hacking group (Fancy Bear) of targeting French government entities in a cyber espionage campaign.…
The European Network for Cyber Security (ENCS) submitted earlier this month feedback to the European Commission on the... The post ENCS warns ambiguous definitions in CRA may undermine energy...
A new malware campaign targeting WordPress sites employs a malicious plugin disguised as a security tool to trick users into installing and trusting it. [...]
How Many Gaps Are Hiding in Your Identity System? It’s not just about logins anymore. Today’s attackers don’t need to “hack” in—they can trick their way in. Deepfakes, impersonation scams, and...
A China-aligned advanced persistent threat (APT) group called TheWizards has been linked to a lateral movement tool called Spellbinder that can facilitate adversary-in-the-middle (AitM) attacks....
WordPress sites are under threat from a deceptive anti-malware plugin. Learn how this malware grants backdoor access, hides…
Everyone has cybersecurity stories involving family members. Here’s a relatively common one. The conversation usually goes something like this: “The strangest thing happened to my streaming...
Cybersecurity researchers have shed light on a Russian-speaking cyber espionage group called Nebulous Mantis that has deployed a remote access trojan called RomCom RAT since mid-2022. RomCom...
Cybersecurity researchers have revealed that RansomHub's online infrastructure has "inexplicably" gone offline as of April 1, 2025, prompting concerns among affiliates of the...
RansomHub refines extortion strategy amid RaaS market fractures, expanding affiliate recruitment
I've been testing AI content detectors for two years now. They're getting more and more reliable.
Forescout Technologies Inc. analyzed 780 hacktivist attacks in 2024, claimed by four groups active on opposing sides of the... The post Forescout reports rise of state-sponsored hacktivism, as...
Google's Threat Intelligence Group (GTIG) released its annual analysis of zero-day exploitation, detailing how 2024 saw attackers increasingly target enterprise software and infrastructure over...
WhatsApp has announced the introduction of 'Private Processing,' a new technology that enables users to utilize advanced AI features by offloading tasks to privacy-preserving cloud servers. [...]