Scattered Spider duo convicted over $38M Transport for London attack
Two members of the Scattered Spider cybercrime collective have admitted launching a cyberattack against Transport for […]
Attackers exploit Cisco Unified CM flaw weeks after patch release
A critical Cisco Unified CM vulnerability is now under active exploitation, weeks after the company issued […]
How a malicious AI agent skill passed security checks and reached 26,000 users
A fake AI agent skill that passed security checks reached over 26,000 users through Instagram, highlighting […]
Kahneman, ‘Where’s Waldo’ and the Nexus pass: A CISO’s mental model for the AI era
Security awareness training as a defense against phishing is dead. It has been dead for a […]
AI-SPM buyer’s guide: 14 tools to secure your AI infrastructure
Widespread enterprise adoption of AI has created a pressing need for security solutions — a tall […]
Meta pauses employee monitoring program after data protections fail
An extensive program at Meta to gather a wide range of data from employees to train […]
Hole in widely-used FFmpeg codec could crash media servers or enable RCE
A newly discovered critical vulnerability in the FFmpeg media processing framework bundled in a huge number […]
Trump sets post-quantum crypto deadlines, launches broader federal quantum initiative
US President Donald Trump on Monday signed a pair of executive orders aimed at accelerating the […]
Unpatched SharePoint servers opened the door to multiple attackers, Microsoft finds
What began as a routine ransomware investigation uncovered two unrelated attackers operating inside the same victim […]
OpenAI rolls out AI-led push to fix open-source software flaws
OpenAI has launched a program with cybersecurity firm Trail of Bits to use AI to find […]