Aligning security processes with business objectives can transform reactive security postures into resilient, strategic programs.
Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these...
License plate readers from controversial surveillance tech company Flock Safety will be added to Raptor Technologies' school safety suite, the two companies announced.
Speedtest, made by Seattle-based Ookla, collects data that could be exploited for cyberattacks, Russia's telecom regulator said in blocking the service.
The global average cost of a data breach fell from $4.88 million in 2024, a 9% decrease that now matches numbers seen in 2023.
A wave of data breaches impacting companies like Qantas, Allianz Life, LVMH, and Adidas has been linked to the ShinyHunters extortion group, which has been using voice phishing attacks to steal...
The Stolichki pharmacy chain, which operates about 1,000 stores across Russia confirmed that a technical failure that halted its operations on Tuesday was caused by a hack.
We’ve reimagined this iconic site to serve as a go-to resource for the news, insights and threat updates your team needs
The Python Software Foundation warned users this week that threat actors are trying to steal their credentials in phishing attacks using a fake Python Package Index (PyPI) website. [...]
The SafePay ransomware gang is threatening to leak 3.5TB of data belonging to IT giant Ingram Micro, allegedly stolen from the company's compromised systems earlier this month. [...]
Researchers at Bitdefender have identified critical security vulnerabilities in the firmware of the Dahua Hero C1 (DH-H4C) smart camera series. The flaws, affecting the device's ONVIF protocol and...
Cybersecurity company Avast released a decryptor for the short-lived FunkSec ransomware and said it is assisting dozens of the gang's targets with the process.
Threat actors are actively exploiting a critical unauthenticated arbitrary file upload vulnerability in the WordPress theme 'Alone,' to achieve remote code execution and perform a full site takeover. [...]
Is your AI in security real or just noise? Learn how to cut hype, boost speed, and prove value with measurable SOC outcomes.
200 integrations strong: How our open ecosystem is redefining cloud security collaboration.
The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack. [...]
Apple has released security updates to address a high-severity vulnerability that has been exploited in zero-day attacks targeting Google Chrome users. [...]
The vulnerability hunters at Google Project Zero want to address what they call the "upstream patch gap," when a vendor has a fix available but the downstream product providers haven't integrated it yet.
Lenovo is warning about high-severity BIOS flaws that could allow attackers to potentially bypass Secure Boot in all-in-one desktop PC models that use customized Insyde UEFI (Unified Extensible...
July phishing campaign
Cisco Talos is back at Black Hat with new research, threat detection overviews and opportunities to connect with our team. Whether you're interested in what we’re seeing in the threat landscape,...
China-linked hackers used patented spyware tech from front companies tied to Hafnium, exposing gaps in cyber threat attribution.
IBM’s yearly report finds that a data breach now costs U.S. organizations more than $10 million for recovery. The post Research shows data breach costs have reached an all-time high appeared first...
AI is reshaping vCISO services—and SMBs are fueling the surge. Cynomi's 2025 report shows 3x adoption growth and major workload drops as MSPs and MSSPs scale cybersecurity like never before. Learn...
Why “flows” are the next leap for threat‑informed defenceATT&CK already gives us the what of adversary behaviour. Attack Flow adds the how, showing the exact sequence, branching options, and...
Originally published at Arachne Digital.Why “flows” are the next leap for threat‑informed defenceATT&CK already gives us the what of adversary behaviour. Attack Flow adds the how, showing the...
Originally published at Arachne Digital.Why “flows” are the next leap for threat‑informed defenceATT&CK already gives us the what of adversary behaviour. Attack Flow adds the how, showing the...
A Vulnerability has been discovered in Google Chrome which could allow for arbitrary code execution. Successful exploitation of the the vulnerability could allow for arbitrary code execution in...
The total portfolio has expanded by more than 236,000 new products and 127 new suppliers in the second quarter.
Siemens has already successfully implemented retrofits to seven cultural buildings, resulting in nearly €25m gross energy savings.