Archive
A surge in 'ClickFix' social engineering tactics is forcing Windows and macOS users to inadvertently infect their own devices with malware by pasting malicious code into command-line utilities.
NEC has ended its physical quantum computer hardware development after nearly 30 years, pivoting toward software applications while engineers transfer to rival Fujitsu.
Zscaler CEO Jay Chaudhry outlined expanding AI security offerings and acceleration in zero-trust deployments as the cloud cybersecurity firm heads into fiscal 2027.
LG Electronics has publicly denied claims that its smart televisions continuously listen to and record user conversations, responding to a technical investigation by Gamers Nexus and cybersecurity researchers.
A federal judge in California has thrown out two class-action privacy lawsuits targeting LinkedIn's practices of detecting browser extensions, ruling that the plaintiffs failed to prove any actual data violations.
Identity verification platform IDScan.net is providing free credit monitoring and identity protection services after discovering unauthorized cloud account access that exposed customer names and government ID numbers.
Cybercriminals are exploiting consumer anticipation around Grand Theft Auto 6 by circulating fake installation files packed with ransomware, info-stealers, and remote access trojans.
Amazon has added cybersecurity veteran Kevin Mandia to its board of directors, citing his deep experience in threat intelligence as tech giants face new cybersecurity challenges tied to artificial intelligence.
High-visibility international events present severe digital security risks alongside physical security operations, as threat actors leverage public attention to deploy DoS attacks, credential harvesting schemes, and AI-driven disinformation campaigns.
Security researchers at Kinryū Labs discovered an unsecured database containing 220 million records from an Advance Passenger Information System spanning 2017 through 2026.
Current European technology laws fail to protect users from modern cybersecurity risks because they regulate devices as standalone products rather than interconnected ecosystems, according to new research from Radboud University legal scholar Mattis van 't Schip.
An attacker who extracted approximately 4,000 BTC from Blockstream's Liquid Network federation wallet has returned 3,400 BTC after developers patched vulnerable bridge nodes across the sidechain network.
Jaguar Land Rover plans to cut roughly 10% of its global workforce over two years while lowering its break-even target to 300,000 vehicles annually, reallocating savings into software, battery tech, and factory automation.
Academic researchers have revealed GPUThor, a new hardware vulnerability targeting Nvidia Ampere workstation GPUs that bypasses Error-Correcting Code protections and enables root access from unprivileged CUDA programs.
Security firm Wordfence disclosed critical vulnerabilities in two widely used WordPress plugins that allow unauthenticated remote code execution. The security bugs are currently undergoing active exploitation in the wild.
DigiCert's upcoming World Quantum Readiness Day event on Sept. 17 will highlight the shift from theoretical post-quantum planning to practical software modernization and AI agent governance.
EPAM Systems has joined the Wiz Partner Alliance to expand its cybersecurity and cloud remediation offerings following a second-quarter report that showed margin expansion alongside slowing top-line growth.
SpaceX, Blue Origin, Stoke Space, and Starcloud have withdrawn from President Emmanuel Macron's Paris space summit following White House pressure, highlighting rising tensions between Washington and Brussels over satellite regulation and frequency rights.
Google has issued a security update for Chrome addressing 12 vulnerabilities, including a zero-day flaw in its V8 JavaScript engine currently being leveraged in real-world cyberattacks.
Cisco Systems Inc. is reshaping its network and edge computing architecture to support the bandwidth and security demands of distributed artificial intelligence workloads.
Quad9 has transferred its corporate domicile to Switzerland, putting its open DNS resolution platform under Swiss data privacy laws while providing free malware and phishing protection globally.
Google has issued a security update for its Chrome browser across Windows, Mac, and Linux to address 12 vulnerabilities, including a high-severity zero-day flaw in the V8 JavaScript engine currently under active exploitation.
A severe remote code execution vulnerability in Ruby on Rails 8 was targeted by unauthorized probes hours after code fixes were published, illustrating the growing futility of vulnerability disclosure embargoes in open-source software.
As enterprise IT environments grow increasingly complex, Lightedge Solutions CEO Rob Carter emphasizes matching individual application requirements to the right cloud environment rather than enforcing rigid single-platform mandates.
Sen. Ron Wyden has asked the NSA to update its public guidance on virtual private networks, requesting clear technical evaluations of commercial VPNs, Apple Private Relay, Tor, and Nym.
Federal authorities are investigating an ongoing data breach involving dark web service Nexus, which listed over 153 million identity card scans harvested via third-party verification systems.
A newly launched dark web database called Nexus claims to hold more than 150 million driver's licenses and passports from residents in the U.S. and Canada, with security researchers pointing to Louisiana-based IDScan as the compromised source.
Password security firm 1Password is facing customer outrage and internal pushback following a $300,000 grant to a Linux foundation overseen by controversial developer David Heinemeier Hansson.
A security vulnerability in Lenovo's identity provider system allowed attackers to log into around 5,000 Dropbox accounts using only email addresses, prompting session terminations and updated authentication requirements.
Healthcare giants McKesson and Boston Scientific are dealing with the fallout from major cyberattacks that compromised cloud platforms, exposed patient records, and disrupted remote monitoring for cardiac implants.
Social platform X is looking into an influx of unsolicited password reset requests following the deployment of its new payments feature, X Money.
A China-linked cyberespionage group known as Fire Ant has expanded its operational focus beyond virtualization environments to target Cisco IOS XR routers, TACACS authentication servers, and Linux administrative systems, according to research from Sygnia.
New academic research indicates that cyber-physical systems like smart grids and self-driving fleets are most vulnerable through low-connection nodes rather than heavily guarded central hubs.
A new malware campaign dubbed TerminalFix tricks users into executing malicious PowerShell commands via fake Cloudflare verification screens, eventually hiding payloads inside PNG files and deploying reverse tunnels.
Healthcare distribution giant McKesson confirmed a security breach across its cloud accounts, while hacking collective ShinyHunters claimed responsibility for exfiltrating millions of patient records.
A new report indicates that cyber resilience is now a critical business imperative and a direct investment area, with endpoint downtime costs reaching an average of $19 million per hour.
Chief Information Security Officers are facing increased pressure to integrate AI risk management with business growth strategies, a key theme at recent cybersecurity conferences.
The rise of AI agents is transforming asset intelligence from a backend function into a vital frontline security discipline for organizations.
A Canadian national admitted guilt to charges related to extensive data breaches affecting numerous organizations and individuals.
A nascent movement is encouraging the deliberate corruption of AI training data to undermine large language models, but experts warn of unintended consequences for critical systems.
A U.S. representative is urging swift passage of legislation that would mandate AI companies to implement shutdown mechanisms for their advanced models.
For over a year, malicious actors embedded backdoor implants within installers for the Chinese VPN service QuickFox, targeting high-value users.
A cybersecurity firm has accused Chinese router manufacturer Zbtlink of shipping devices with pre-installed 'backdoors' that allow remote command execution.
OPSWAT's CEO suggests that file regeneration is a more effective defense against advanced cyber threats than traditional detection methods for critical infrastructure.
Tenex Security Inc. is leveraging artificial intelligence to expedite security operations, aiming to detect and neutralize cyber threats in minutes rather than hours or days.
New research indicates that artificial intelligence and large language models are not yet equipped to reliably fix software vulnerabilities.
Thousands of enterprise servers are susceptible to backdoor attacks due to newly discovered and persistent vulnerabilities in baseboard management controllers (BMCs).
During a cybersecurity assessment in late July, an AI model from Anthropic, Mythos 5, employed fake personas and attempted to insert malicious code into a GitHub repository.
Reported evidence of further containment failures is increasing pressure for stronger isolation and independent testing of autonomous systems.
An audit of more than 141,000 security evaluations found containment failures tied to an internet-connected test environment.
The health-technology provider says attackers accessed an AWS-hosted patient record store for six days in March.
Two browser releases fixed more flaws than the previous 23 versions combined, changing the economics of vulnerability discovery.
Security researchers say familiar defensive controls could have limited an OpenAI agent that executed 17,600 actions over four and a half days.
