For those who wonder what the support window is for Apple products, the company now has an answer: it’s quietly ended support for some of its oldest iPhones and iPads, cutting off restore access for devices that first went on sale more than a decade ago. While the move has prompted some complaints, the truth…
Here’s why teams have to treat token management with the same urgency as network telemetry.
Upgrade your entire home theater at once with this LG CineBeam Q and soundbar bundle.
Durabook, a mobile solutions brand owned by Twinhead International Corporation, is debuting a new deal registration program to protect channel partners’ investments in developing new business opportunities. Growing channel partnerships with an enhanced program The Vanguard Partner Program was developed to serve channel partners, “that are the foundation of its sales strategy.” The program complements…
I went hands-on with the best smart notebooks to see which ones actually make it easier to capture ideas without paper clutter.
Crypto prediction and betting sites are appearing around the World Cup, and researchers have already tracked scams aimed at fans, including fake ticketing, fixed-match betting, prediction scams, and fan-branded meme coins. We investigated one prediction site ourselves. While we aren’t claiming every site works the same way, it matched several well-known scam patterns. Whether it’s…
Until Tenda patches the backdoor to its popular routers, you have one defense option.
Insurance provider AssuranceAmerica has confirmed a data breach affecting the personal information and driver’s license numbers of up to 6.9 million people. AssuranceAmerica provides car and rental insurance to customers across 14 US states through a network of over 9,500 independent agents. TechCrunch reports:“AssuranceAmerica said it discovered hackers in its computer systems on March 17.…
After spending just 5 minutes with Octopi, I made it my default home screen launcher – it’s that perfect! There are free and Pro versions.
Looking for a new 15-inch laptop? We’ve tested the best ones this year from Apple, Lenovo, Asus, and Samsung.
A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining adversary-in-the-middle (AiTM) and device code methods with AI-assisted lure generation. […]
A San Antonio man who sexually exploited children while leading 8884, an offshoot of the notorious violent extremist collective 764, was sentenced to 40 years in prison in federal court Wednesday, the Justice Department said. Alexis Aldair Chavez began associating with 764 as a child in 2022 when a co-conspirator introduced him to 7997, one…
The fate of a Ukrainian tax software company shows how modern cyberwarfare can claim casualties far beyond the battlefield, and how businesses across the ocean still need to protect themselves.
The Pink cyber extortion crew is tricking employees into giving them access to their Microsoft 365 accounts by faking Entra passkey enrollment requests. The attack The attack starts with a vishing call to an employee. The caller poses as IT and says it’s time to set up a passkey. Everything after that is theater, built…
The TP-Link Tapo C465 is a wireless security camera with a built-in solar panel for power, and it doesn’t require a subscription.
Bitdefender, a cybersecurity-focused organization, has launched a new program to enable European Union (EU) sovereignty and regulatory compliance. European data hosting and security solution includes contract buyout The new program empowers European organizations to transition to a fully European cybersecurity and data hosting solution, ensuring that customer and configuration data, security events, telemetry, and information…
DistroWatch says these are the top Linux distros. I say this order is better.
Security operations don’t slow down when IT teams take vacation, but staffing levels often do. Kaseya explains how AI-driven automation can help organizations maintain consistent security operations and reduce reliance on manual processes year-round. […]
Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network
RSA and ECC, cryptographic algorithms that we’ve all relied on for decades, are vulnerable to the attack of sufficiently advanced quantum computers. Such quantum computers do not exist yet, but they seem to be coming sooner than expected. Luckily, the solution is already available: migrate to ML-KEM encryption and ML-DSA signatures, which are designed to…
Citrix has announced updates to its high-performance application delivery and security platform NetScaler, introducing MCP Gateway functionality to allow enterprises to securely route, govern and observe agent traffic to backend Model Context Protocol (MCP) servers. In addition, the company unveiled other enhancements to NetScaler AI Gateway, that extend model routing and token-level usage tracking for…
Vectogate has launched an AI governance platform designed to give organizations centralized control over AI agents as they increasingly take on autonomous tasks with access to sensitive data and internal business systems. The company aims to address one of the key governance challenges posed by enterprise AI. The platform is initially available in private beta,…
Have you received an email from a recruiter at Adobe, Netflix, or OpenAI offering you an exciting new marketing role? Well, before you start brushing up your interview technique, take a closer look at who is really behind it. Read more in my article on the Hot for Security blog.
A cryptomining incident highlights how AI gateways can provide access to AI models, cloud infrastructure, and identity and access management (IAM) data.
A new report from cybersecurity vendor Cynet finds managed service providers are pulling ahead of in-house security teams in AI adoption and confidence, even as both groups identify AI-powered phishing and social engineering as their top cybersecurity threats. The findings suggest organizations are increasingly turning to MSPs for AI-driven security capabilities as cyberattacks become more…
A cloud intrusion that ended with the deployment of cryptomining malware has exposed a bigger risk for enterprises: AI gateways that concentrate access to cloud identities, permissions, and foundation models in a single, highly privileged system. Researchers from cybersecurity firm Darktrace found attackers compromising an AWS EC2 instance acting as a LiteLLM proxy for Amazon…
AssuranceAmerica confirmed a breach exposing nearly 7 million driver’s licenses after hackers compromised an employee account and stole customer data. U.S. auto insurer AssuranceAmerica has confirmed a data breach affecting nearly 7 million people, making it the largest known theft of Americans’ driver’s license information in 2026. “In a data breach notice sent to customers…
The UK’s National Cyber Security Centre (NCSC) wants to deploy autonomous AI agents capable of finding and neutralizing cyberattacks on national networks in real time, marking Britain’s push toward a sovereign, machine-speed cyber defense system. The blueprint, called Cyber Shield, was developed jointly with the Department for Science, Innovation and Technology (DSIT). “The objective of…
AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using models like Mythos, attackers write tailored bait, pick targets, test what lands, and jump to the next host before your team clears the first alert. That is the gap, and it is not your fault. The tools…
Microsoft has finally released a security update for its Microsoft Malware Protection Engine, which fixes CVE-2026-50656, the Windows Defender local privilege escalation vulnerability triggered by the RoguePlanet exploit. The vulnerability and the fix CVE-2026-50656 is due to improper link resolution before file access, affects Windows 10 and Windows 11, and may allow authenticated attackers to…
Survey of cybersecurity leaders by MetaCompliance finds that many feel boards are uninterested in ever-evolving cyber risks
Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests
Microsoft issued a security update that fixes the zero-day vulnerability known as RoguePlanet in Microsoft Defender. RoguePlanet is tracked as CVE-2026-50656, a Microsoft Defender elevation of privilege (EoP) vulnerability. As we reported last month, if successfully exploited, RoguePlanet can allow an attacker to elevate privileges from a standard user account to NT AUTHORITYSYSTEM, the highest privilege level…
Wiz found GhostApproval symlink flaws in major AI coding assistants that could hide sensitive file targets, bypass approval checks and enable system access too.
After decades in the cybersecurity space, Norton remains one of the most capable antivirus suites thanks to its powerful security tools.
State of Cybersecurity in the US American organizations are processing more malware submissions than ever, and the mix keeps shifting under their feet. Phishing kits that hijack multi-factor authentication now sit alongside decades-old ransomware, commodity RATs sold for the price of a streaming subscription, and loaders built to slip payloads past EDR undetected. For CISOs…
Criminals who pose as police officers, romantic partners, and business suppliers have built fraud operations that reach across continents. A four-month enforcement campaign against these schemes wrapped up, and police in 97 countries and territories took part. Thousands of arrests The campaign, called Operation First Light 2026, centered on social engineering scams and the money…
In this post, I will discuss dealing with web security when using online dating websites. The main threat on a dating site is rarely the awkward date. It is the account takeover, the phishing link, and the stranger who asks for money before asking to meet. Online romance fraud cost Americans $823 million in 2024,…
Historically, humans have solved their toughest tasks by creating tools capable of withstanding greater strain to undertake the job or augment their abilities. From levers to steam engines and beyond, the structural evolution of machines is almost as remarkable as their ability to improve operational cultures. In recent times, we have seen machines attain their…
Microsoft has announced plans to disable Outlook Web Access (OWA) Light, the lightweight version of the Outlook Web App email client, in a future Exchange Server update. […]
Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets it apart is that it was already real and running when we announced it — built quietly months earlier, heads down, taking findings and shipping fixes, because customers kept asking…
The technique abuses symlinks to escape the intended workspace and weaken human-in-the-loop protections.
Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval
June 2026 saw 176 confirmed cyber attacks. Cyber Crime drove three in four incidents, Malware remained attackers’ weapon of choice, and Information & Communication infrastructure took the heaviest hit. This visual breakdown charts the month’s motivations, attack vectors, initial access techniques, and hardest-hit sectors.
Millions of developers share their keyboard with GitHub Copilot. Inside Visual Studio Code, it opens their files, writes and edits code, runs scripts, and reworks its own output across many turns. The safety testing that vets these agents still runs on chatbot rules: one harmful prompt, one response, graded alone. That rulebook misses where the…
Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy. According to a new report published by the Threat Hunter Team from Symantec, the ransomware was first publicly spotted in the wild on May 21, 2026. It’s assessed…
SpaceXAI has launched Grok 4.5, pitching the model to developers and enterprises trying to control the rising cost of AI-assisted software development. In a statement, the company said the model is priced at $2 per million input tokens and $6 per million output tokens. It said the model is built for coding and agentic work, runs…
June 2026 saw 176 confirmed cyber attacks. Cyber Crime drove three in four incidents, Malware remained attackers’ weapon of choice, and Information & Communication infrastructure took the heaviest hit. This visual breakdown charts the month’s motivations, attack vectors, initial access techniques, and hardest-hit sectors.
Microsoft fixed RoguePlanet (CVE-2026-50656), a Defender flaw allowing local attackers to gain higher privileges through the Malware Protection Engine. Microsoft released security updates for RoguePlanet, a vulnerability tracked as CVE-2026-50656 (CVSS score of 7.8) affecting the Malware Protection Engine used by Defender. The Microsoft Malware Protection Engine (mpengine.dll) powers Defender’s malware scanning, detection, and removal…
Any public Instagram account is fair game to be used for AI generation with Meta’s new Muse Image.
I tested some of the top blood pressure watches available, and considered medical research and current FDA guidance, to help you choose the best one for your needs.
In a client engagement last year, an LLM-based deployment agent with standing access to a production Kubernetes cluster triggered a four-hour outage through a malformed configuration push. In the IAM, the agent appeared as a service account with a long-lived API key, no MFA, no scoped revocation path. When the incident review team asked which…
Microsoft co-signed a malicious kernel driver, and now it’s being used to kill security software in ransomware attacks.
In this post, I will show you how to choose the best AI agent software for customer support at scale. Tickets pile up, wait-times climb, and budgets stay flat. A 2025 Gartner survey shows just over half of customers would let a generative AI assistant resolve their issue if it meant faster help, giving support…
Law enforcement agencies have arrested 5,811 suspects and seized $293 million in illicit assets in a global anti-fraud operation spanning 97 countries. […]
Chatting with readers and regular folks in the real world these days, I can’t help but notice a common theme anytime the topic of AI comes up. It’s an almost amusingly extreme contrast: While the myopic world of tech people (and the type of mostly AI-powered “thought leaders” you see posting in turbo-speed on LinkedIn)…
Every consumer app has a settings menu that lets you make decisions about things like notifications or dark mode. Meta has just decided that anyone can generate AI images of you from your public Instagram account by typing your Instagram handle into a prompt. On July 7, Meta launched its AI image generation model, Muse…
Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security
Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security
Think your device is infected? Try out our favorite software to remove malware and restore your security.
After a CrowdStrike update caused millions of Windows PCs worldwide to crash in July 2024, Microsoft announced the Windows Resiliency Initiative. The new Point-in-time Restore feature is a key part of that.
After moving and obtaining a new health diagnosis, I made a few changes to my WFH setup. Here’s what changed (and why).
As the race for artificial-intelligence supremacy heats up, Beijing is considering tightening its grip on homegrown technology.
Security leaders have been on a spending sprint. The global AI in cybersecurity market is valued at $44 billion in 2026 and is projected to reach $213 billion by 2034, a trajectory that reflects genuine belief that machine learning will close the gap between the volume of threats and the capacity of human analysts. That…
As the race for artificial-intelligence supremacy heats up, Beijing is considering tightening its grip on homegrown technology.
Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the Microsoft Malware Protection Engine (“mpengine.dll”), which provides scanning, detection, and cleaning capabilities for its antivirus and
Claude apps gateway for AWS is a self-hosted control plane that gives organizations a single point of control over access, costs, and policies for Claude Code and Claude Desktop. It replaces per-developer cloud credentials, manual distribution of managed settings to developer laptops, and centralizes usage attribution and spending controls. The gateway can be deployed with…
Fake apps like WireVPN and a trojanized 7-Zip turn victims’ devices into residential proxies, letting criminals route traffic through their IPs. Infoblox’s threat research team started pulling on a single thread in early 2026: a fake version of the 7-Zip archive utility hosted at 7zip[.]com instead of the real site, 7-zip[.]org. The researchers uncovered a…
Most businesses moved to the cloud over the last decade, but the shift was ad hoc rather than planned, so the setup is rarely right-sized, leaving many overpaying. Fitzroy IT’s…
NetSPI has announced the expansion of its AI-powered continuous pentesting platform, broadening the suite of services that organizations can use to ensure critical assets are always protected. The new services comprise continuous web application penetration testing, continuous AI penetration testing, continuous internal penetration testing and continuous AI findings validation which applies expert human judgement to…
Instagram is no longer just a photo-sharing app. For South African businesses it is a sales channel, a customer service desk, and a brand asset, which is exactly why criminals target it. At Da Vinci Cybersecurity, Instagram-related cases now land on our desks weekly: hijacked business profiles held to ransom, cloned accounts running advance-fee scams…
My new favorite use of Android Auto happens outside my car. Here’s why.
A new survey shows security leaders have an inflated sense of safety regarding their collaboration tools and platforms.
Myriad360’s relationship with Hewlett Packard Enterprise is entering a new phase as the solution provider looks to expand beyond its legacy strength in networking and into compute, storage, GreenLake, and enterprise AI opportunities. Myriad360 builds on HPE networking momentum Diane Pagani, VP of Strategic Alliances, Modern Data Center and Networking at Myriad360, told Channel Insider…
American insurance company AssuranceAmerica has disclosed a data breach impacting nearly 7 million drivers after attackers gained access to its systems earlier this year. […]
Your Business Is Already Using AI. Is Anyone Securing It? Somewhere in your organisation right now, someone is pasting company information into a chatbot. A department has quietly signed up for an AI tool that nobody in IT has reviewed. A supplier has automated part of their process with AI, and your data is flowing…
Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from cyber-attacks
Meta has announced that its new artificial intelligence (AI) model Muse Image lets people use public Instagram posts and reels to generate AI content, and it’s enabled by default. “You can also @-mention Instagram accounts in the Meta AI app to bring specific Instagram profiles right into your images,” the social media giant said in…
Poorly segmented networks and weak security controls continue to undercut security organizations’ ability to identify and contain attacks, giving attackers free rein after initial compromise, according to a recent study based on real-world enterprise security telemetry. Zero Networks’ 2026 Lateral Movement Exposure Report — based on analysis of 54 trillion activities across 312 live enterprise…
Developers who build with AI coding agents grab capabilities off public marketplaces the same way they grab packages from npm or PyPI. The add-ons are called agent skills. Each one is a little bundle of plain-English instructions, scripts, and files that a tool such as Claude Code or OpenAI Codex loads when it needs a…
Microsoft has released a security patch to address a Defender zero-day vulnerability known as “RoguePlanet,” disclosed after the June 2026 Patch Tuesday. […]
A direct message arrives on Reddit from a stranger, and it invites a reply. That reply is the point. This scheme runs on social engineering, with no malware and no malicious links, and it has spread across Reddit, Discord, and similar platforms. The goal is a single piece of information: a login or verification code…
Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker’s code on your own machine instead. That is the finding in a proof-of-concept published Wednesday by the AI Now Institute, an attack it calls “Friendly Fire.” It works against Anthropic’s Claude Code and OpenAI’s Codex when either is running…
Developers are pushing code and opening pull requests across economy borders at a rate GitHub has rarely seen. Outbound collaboration, the sum of git pushes and pull requests sent from developers in one economy to public repositories in another, grew by 16% from Q4 2025 to Q1 2026, according to the latest GitHub Innovation Graph…
McAfee Mobile Security for iOS combines scam protection, web protection, VPN, Wi-Fi security, and device security checks in a single app. It is also available for Android. After downloading the app from the App Store, I created an account and completed a short onboarding process. The app asks whether you want to receive notifications before…
As Mexico gears up for the FIFA World Cup, discover how its new cybersecurity strategy confronts unprecedented challenges to safeguard vital infrastructure.
Network analysts who open packet captures in Wireshark push untrusted data through a large set of protocol dissectors, and each parser is a spot where a malformed frame can trip up the software. The 4.6.7 maintenance release closes twelve of those weak points. The fixes reach from cellular signaling parsers to the code that reads…
Fraudsters spent 2025 investing in scale. New routes, new tools, and higher message volumes moved through the SMS, voice, and chat channels that businesses rely on to reach customers. Money follows that activity. The Communications Fraud Control Association puts global telecom fraud losses at around 42 billion dollars for the year, several billion higher than…
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer’s computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead. The affected tools are Amazon Q Developer, Anthropic’s Claude Code, Augment, Cursor, Google Antigravity,…
Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains. The activity dates back to at least August 2022, according to DNS threat intelligence firm Infoblox. Once such campaign, observed earlier this year,…
Antivirus vendors and security startups keep shipping AI features that promise to read malware the way a seasoned analyst would. The results inside security teams tell a quieter story. A new paper argues that static analysis of software, the job of deciding whether a program is malicious by examining its contents on disk, remains one…
Three consecutive wins cement Superloop’s position as the benchmark for internet speed in Australia.
If AI is so pervasive in the workplace why is it that only 17% of all Go-To-Market jobs advertised in the past 90 days mentioned AI as a required skill?
For all the remarkable advances in laptop technology over the past two decades, one problem stubbornly remains. They’re terrible to work on, ergonomically, with a necessary…
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Sustainable business operations are increasingly shaped by how effectively organisations manage information across their technology environments. Rather than being driven…
D-Link has released two new 5G Wi-Fi 6 personal hotspots letting you connect, stream, and do whatever you need online no matter if you’re at home, working at a cafe, fixing an…
[This is a Guest Diary by Jason Callahan, an ISC intern as part of the SANS.edu BACS program] Every so often a honeypot hit comes along that is less about the exploit and more about the intent behind it. While reviewing DShield logs I ran into a scanning bot that caught my eye: a URI…
Fastly Brings Leading Cloud Edge Expertise to Help DIMPACT Members Understand and Optimise Digital Carbon Footprints