- Picus Launches Exposure Validation to Safely Deprioritize CVEs
- Following Data Breach, Multiple Stalkerware Apps Go Offline
- Russian Threat Actor TAG-110 Goes Phishing in Tajikistan
- 3am Ransomware Adopts Email Bombing, Vishing Combo Attack
- CISA: Russia’s Fancy Bear Targeting Logistics, IT Firms
- Blurring Lines Between Scattered Spider and Russian Cybercrime
- Security Threats of Open Source AI Exposed by DeepSeek
- Keeping LLMs on the Rails Poses Design, Engineering Challenges
- Experts Chart Path to Creating Safer Online Spaces for Women
- GitHub’s AI Assistant Opened Devs to Code Theft
- GitLab’s AI Assistant Opened Devs to Code Theft
- SideWinder APT Caught Spying on India’s Neighbor Gov’ts
- Lumma Stealer Takedown Reveals Sprawling Operation
- Ivanti EPMM Exploitation Tied to Previous Zero-Day Attacks
- Marks & Spencer Projects $400M Loss After Cyberattack
- Pandas Galore: Chinese Hackers Boost Attacks in Latin America
- Unimicron, Presto Attacks Mark Industrial Ransomware Surge
- Coinbase Breach Compromises Nearly 70K Customers’ Information
- Unpatched Windows Server Flaw Threatens Active Directory Users
- NIST’s ‘LEV’ Equation to Determine Likelihood a Bug Was Exploited
- The Day I Found an APT Group In the Most Unlikely Place
- The Hidden Cybersecurity Risks of M&A
- Asia Produces More APT Actors, As Focus Expands Globally
- Fake Kling AI Malvertisements Lure Victims With False Promises
- Virgin Media 02 Vuln Exposes Call Recipient Location
- Tenable Adds Third-Party Connectors to Exposure Management Platform
- Regeneron Pledges Privacy Protection in $256M Bid for 23andMe
- Bumblebee Malware Takes Flight via Trojanized VMware Utility
- Large Retailers Land in Scattered Spider’s Ransomware Web
- ‘Hazy Hawk’ Cybercrime Gang Swoops In for Cloud Resources
- Novel Phishing Attack Combines AES With Poisoned npm Packages
- Why Rigid Security Programs Keep Failing
- ‘Operation RoundPress’ Targets Ukraine in XSS Webmail Attacks
- S. Dakota CIO Gottumukkala Signs on as CISA Deputy Director
- Legal Aid Agency Warns Lawyers, Defendants on Data Breach
- CVE Disruption Threatens Foundations of Defensive Security
- [Virtual Event] Strategic Security for the Modern Enterprise
- CVE Disruption Threatens Foundations of Defensive Security
- Coinbase Extorted, Offers $20M for Info on Its Hackers
- Australian Human Rights Commission Leaks Docs in Data Breach
- Dynamic DNS Emerges as Go-to Cyberattack Facilitator
- Attacker Specialization Puts Threat Modeling on Defensive
- How to Develop and Communicate Metrics for CSIRPs
- Turkish APT Exploits Chat App Zero-Day to Spy Kurds
- Big Steelmaker Halts Operations After Cyber Incident
- Valarian Unveils Data Management Platform Designed for Government Use
- International Crime Rings Defraud US Gov’t Out of Billions
- Attackers Target Samsung MagicINFO Server Bug, Patch Now
- Critical SAP NetWeaver Vuln Faces Barrage of Cyberattacks
- RSAC 2025: AI Everywhere, Trust Nowhere
