The latest threats, scams, and security stories — written for everyone.
Cybersecurity researchers have uncovered a new campaign by a China-aligned threat group known as TA419, which is currently targeting American artificial intelligence policy experts. The attackers are using sophisticated adversary-in-the-middle phishing techniques, sending fraudulent emails that mimi…
Read more →Cybersecurity researchers have recently uncovered a new campaign by a threat group known as Warlock, which is using vulnerabilities in Microsoft SharePoint to slip past corporate defenses. Instead of just stealing data, this group goes a step further by actively turning off internal security tools b…
Read more →When a board of directors asks a CISO how secure the company is, how much risk they are facing, and whether their security spending is actually working, it often leads to a room full of awkward silence. The problem isn't that security leaders lack data; it is that security metrics are usually drowne…
Read more →Law enforcement agencies have arrested a 16-year-old suspected of leading KillSec, a notorious cybercrime group responsible for deploying ransomware and operating data leak sites. While this takedown is a major victory for global cybersecurity, it is a stark reminder that digital threats come from u…
Read more →Cybercriminals are constantly finding new ways to trick everyday internet users, and a recent security warning highlights a particularly sneaky tactic. Attackers have started abusing legitimate IT management tools, specifically MSP360 and ScreenConnect, inside phishing emails. Because these are real…
Read more →A recent major security breach at the French tax authority revealed that hackers managed to steal sensitive data for nearly two weeks by simply using stolen employee login credentials. Because the attackers logged in using real, legitimate staff passwords, their activity looked completely normal to…
Read more →