ConnectWise patches critical ScreenConnect authentication failure after five days
ConnectWise has issued a security update for ScreenConnect, five days after warning customers the product could […]
Deception Technology Implementation Best Practices: A Practical Guide for Enterprise Security Teams
Key Takeaways Define deception goals around detection speed, threat intelligence, and team capacity before choosing a […]
India’s STPI serves TerminalFix-style attack via fake Cloudflare check
A website linked to India’s Software Technology Parks of India (STPI) is serving a spoofed Cloudflare […]
Anthropic finds evidence of a fourth AI escaping from containment
Anthropic has owned up to a fourth security incident involving its AI model, Claude, escaping onto […]
How AI and cybersecurity are reshaping ServiceNow
The once stable era of IT service management (ITSM) has entered a period of disruption and […]
Attackers use passkey-themed scams to hijack Microsoft 365 accounts
Attackers are using passkey-themed social engineering to trick employees into giving them access to their Microsoft […]
Google’s Early Access is creating a blind spot for malicious apps
Google’s Early Access program is meant to give developers a place to release unfinished apps, gather […]
Attackers are weaponizing the gap between Chromium fixes and Chrome patches
A new exploit kit is revealing the perils of the “patch later” mentality. According to the […]
From JADEPUFFER to Multi-Agent Intrusions: The Next Wave of Autonomous Attacks
Key Takeaways JADEPUFFER proved one AI agent could run a full attack chain without a human […]
AI workflows may be creating a dangerous new authorization blind spot
A newly identified AI attack technique can let unauthenticated users trigger privileged workflows and access enterprise […]