Rethinking vendor risk management in an era of compliance failures, rising breach costs, and regulatory scrutiny.

Explore the complexities of human risk in cybersecurity with Wade’s insightful thought exercise. Learn how to identify and measure…

Let’s be real for a second. Cybersecurity has always been a cat-and-mouse game. Hackers invent new tricks. Security experts scramble to…

Automation isn’t about laziness — it’s about surviving the grind of cybersecurity work without losing clarity.

The FBI has issued a FLASH Alert warning about UNC6040 and UNC6395, two groups actively compromising Salesforce via vishing and malicious OAuth apps to steal data.

Penske Media is suing Google over AI Overviews, claiming the feature unlawfully uses its content and has caused a significant drop in traffic and revenue for its sites.

Google unveils VaultGemma, the first LLM trained with differential privacy. The open-source model achieves near non-private performance, setting a new standard for privacy-first AI.

Two critical vulnerabilities (CVSS 10 & 9.8) in Digiever NVRs allow unauthenticated attackers to steal credentials and execute commands. Update your firmware immediately.

Researchers expose BaoLoader, a malware operation that has systematically used at least 26 code-signing certificates over seven years to appear legitimate and bypass security.

A critical flaw in LangChainGo, a popular LLM framework, allows attackers to read sensitive files via server-side template injection. A patch has been released.

A new report reveals a major surge in phishing attacks targeting U.S. energy companies like Chevron, using cloned websites to steal credentials and financial data.

IBM X-Force reveals new findings on Hive0154, a China-aligned threat actor using an upgraded Toneshell backdoor and a new USB worm to target organizations.

Researchers have found a new Spectre-like attack called VMScape that allows a malicious VM to steal data from a hypervisor on Intel and AMD CPUs.

Trend Micro reveals a new global malware campaign, EvilAI, that impersonates productivity and AI tools to infiltrate organizations and steal data.

Apple's new N1 network chip for the iPhone has a key Wi-Fi 7 limitation, capping bandwidth at 160 MHz. This affects peak performance despite the upgrade.

New patches for CUPS, the open-source Linux printing system, fix two flaws that can lead to remote DoS and authentication bypass.

Microsoft is testing a full-screen "SCOOBE" interface in Windows 11 to remind users about Microsoft 365 subscriptions, and it may block access to the desktop.

Summary

A New Phishing Threat Is Targeting Python Developers