Plus, a college kid used cat memes to hunt a cyberweapon and new jobs are being created by AI.
Category: AI
AI, Apps, Compliance, Cybersecurity, Global Security News
How AWS KMS and AWS Encryption SDK overcome symmetric encryption bounds
If you run high-scale applications that encrypt large volumes of data, you might be concerned about tracking encryption limits and rotating keys. This post explains how AWS Key Management Service (AWS KMS) and the AWS Encryption SDK handle Advanced Encryption Standard in Galois Counter Mode’s (AES-GCM) encryption limits or bounds automatically by using derived key…
AI, APAC, Exploits, Global Security News, Politics
Apple leans into the component crisis storm
What does a well-managed company do in a tough business environment? It works to separate obstacle from opportunity, and then exploits its advantages, scale, and timing to turn the former into the latter. Apple’s history is full of examples of this kind, from the 150 calls a young Steve Jobs made cold-calling investors to Apple’s recent move to…
AI, Data Breaches, Global Security News
AI Firm Mercor Confirms Breach as Hackers Claim 4TB of Stolen Data
AI firm Mercor confirms a breach linked to a LiteLLM supply chain attack, as hackers claim to have stolen 4TB of sensitive data and internal systems.
AI, Data Breaches, Global Security News
Blast Radius of TeamPCP Attacks Expands Amid Hacker Infighting
As organizations disclose breaches tied to TeamPCP’s supply chain attacks, ShinyHunters and Lapsus$ are getting involved, taking credit, and creating a murky situation for enterprises.
AI, Cybersecurity, Global Security News
Managing Brand Drift: A Framework for Multi-Channel Batch Asset Production
In this post, I will talk about managing brand drift and discuss the framework for Multi-Channel batch asset production. The primary challenge for creative teams today is no longer just generating a high-quality image; it is generating a hundred high-quality images that all feel like they belong to the same campaign. When an asset moves…
AI, Apps, Compliance, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, Government & Policy, malware, Network Security, Risk Management
High-Severity Vulnerabilities, Supply Chain Breaches, and AI Threats Redefine Cybersecurity This Week
Major Threats & Vulnerabilities High-Severity Flaws A newly disclosed Cisco IMC vulnerability (CVSS 9.8) allows unauthenticated attackers to gain full administrative access to UCS servers. Cisco has issued patches, and while no active exploitation has been observed, immediate updates are strongly advised. In another critical discovery, a GIGABYTE Control Center flaw enables remote code execution…
AI, Apps, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, Risk Management
Armis State of Cyberwarfare Report: AI-Powered Cyber Attacks Accelerate Worldwide
Cyberwarfare has entered a new phase — and it’s moving faster than many organizations can defend against. The 2026 State of Cyberwarfare report from Armis warns that AI-driven attacks, geopolitical tensions, and expanding digital dependencies are converging to create a constant, high-pressure threat environment for enterprises worldwide. “Modern businesses find themselves in the crosshairs of…
AI, Global Security News
Evolution of Ransomware: Multi-Extortion Ransomware Attacks
Multi-extortion ransomware relies on stolen data to pressure victims with public leaks. Penta Security explains how its D.AMO platform keeps exfiltrated files encrypted and useless to attackers. […]
AI, Cybersecurity, Exploits, Funding, Global Security News
North Korea–linked hackers drain $285M from Drift in sophisticated attack
Drift lost $285M in a sophisticated attack, likely by North Korea, who used nonce-based tricks to gain control and quickly drain funds Drift suffered a $285 million cryptocurrency heist in a highly sophisticated attack likely linked to North Korea. Threat actors used durable nonce accounts to pre-sign and delay transactions, while also compromising multisig approvals…
AI, Global Security News, malware, Russia
CrystalX RAT: new MaaS malware combines spyware, stealer, and remote access
CrystalX RAT, a new sophisticated MaaS malware, combines spyware, data theft, and remote access, allowing attackers to monitor victims. In March 2026, Kaspersky researchers uncovered a Telegram-based campaign promoting a previously unknown malware sold as a MaaS with three subscription tiers. The Trojan offers a wide range of features, including RAT capabilities, data theft, keylogging,…
AI, Data Breaches, Europe, Exploits, Global Security News, Government & Policy, Network Security, Risk Management
TeamPCP Supply Chain Campaign: Update 006 – CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments, (Fri, Apr 3rd)
This is the sixth update to the TeamPCP supply chain campaign threat intelligence report, “When the Security Scanner Became the Weapon” (v3.0, March 25, 2026). Update 005 covered developments through April 1, including the first confirmed victim disclosure (Mercor AI), Wiz’s post-compromise cloud enumeration findings, DPRK attribution of the axios compromise, and LiteLLM’s release resumption after Mandiant’s forensic audit.…
AI, Cybersecurity, Global Security News, Risk Management
Is AI Driving Tech Layoffs or Masking Deeper Cuts?
Oracle’s latest round of layoffs is intensifying a broader question across the tech sector: Is artificial intelligence actually replacing workers, or simply being used to justify long-anticipated cost cuts? Oracle cuts jobs as AI spending reshapes cost structure In Oracle’s case, the company has added hundreds of billions to its books through AI investments. As…
AI, Global Security News
Source Code Leaks Highlight Lack of Supply Chain Oversight
Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.
AI, Apps, Compliance, Cybersecurity, Europe, Global Security News, Government & Policy, Network Security, Risk Management, Venture
March 2026 Leadership Moves: Google Cloud Partner Chief Departs & More
As the first quarter of 2026 comes to a close, organizations around the channel have made significant moves to their leadership teams. Key figures have been appointed, promoted, or departed from their positions to make way for new faces. Take a look around at some of the signature moves that enterprises have made as they…
AI, Global Security News, Government & Policy
What Is Digitization vs Digitalization vs Digital Transformation?
In today’s digital landscape, the terms “digitization,” “digitalization,” and “digital transformation” are often used interchangeably, leading to confusion about their distinct meanings and business implications. While these three concepts are interconnected, each represents a unique approach to leveraging technology to drive organizational change and growth. Understanding the nuances between them is crucial for companies seeking…
AI, Global Security News
Cisco IMC auth bypass vulnerability allows attackers to alter user passwords (CVE-2026-20093)
Cisco has fixed ten vulnerabilities affecting its Integrated Management Controller (IMC), the most critical of which (CVE-2026-20093) could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system as Admin. Cisco ICM riddled with vulnerabilities Cisco Integrated Management Controller is a built-in hardware management system used in Cisco servers. It allows…
AI, Global Security News
ServiceNow CEO Builds New Business Model Around AI
Bill McDermott envisions a ‘control tower’ for companies as AI moves beyond intelligence to execution.
AI, Global Security News
Microsoft still working to fix Exchange Online mailbox access issues
Microsoft is investigating and working to resolve Exchange Online mailbox access issues that have intermittently affected Outlook mobile and macOS users for weeks. […]
AI, Global Security News
UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack
The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engineering campaign orchestrated by North Korean threat actors tracked as UNC1069. Maintainer Jason Saayman said the attackers tailored their social engineering efforts “specifically to me” by first approaching him under the guise of the founder of…
AI, Cybersecurity, Data Breaches, Global Security News
6 Best Bitcoin Vulnerability Scanners & Blockchain Security Tools Compared
In this post, I will talk about the 6 best Bitcoin vulnerability scanners & blockchain security tools. Last year, North Korean hackers siphoned $2 billion in cryptocurrency—about sixty percent of all reported thefts in 2025—with a single $1.5 billion exchange breach leading the spree. Google’s Quantum AI team estimates a quantum computer will break Bitcoin’s…
AI, Global Security News
Man admits to locking thousands of Windows devices in extortion plot
A former core infrastructure engineer has pleaded guilty to locking Windows admins out of 254 servers as part of a failed extortion plot targeting his employer, an industrial company headquartered in Somerset County, New Jersey. […]
AI, Apps, Cybersecurity, Endpoint, Global Security News, Risk Management
12 cyber industry trends revealed at RSAC 2026
The 2026 RSA circus is over. The tents are packed and the elephants have been loaded onto the train. Nevertheless, it was an eventful week. There were fleets of vehicles — Escalades, Rivians, trucks but curiously, no Teslas — strewn with vendor names and tag lines, and you couldn’t walk anywhere near Howard Street in…
AI, Global Security News
Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK
Solana-based decentralized exchange Drift has confirmed that attackers drained about $285 million from the platform during a security incident that took place on April 1, 2026. “Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers,” the&
AI, Global Security News
New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs
A large-scale credential theft campaign targeting senior executives has been linked to a previously unknown automated phishing platform called Venom
AI, Data Breaches, Global Security News, malware
Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies
Iran-linked hackers claim to have breached Israeli air defence contractor PSK Wind, which develops command and control systems. Pro-Iran Handala group announced on April 2 that it breached PSK Wind Technologies, an Israeli engineering and IT firm specializing in integrated systems for defense and critical communications, including command and control solutions. Handala appears as a…
AI, Global Security News
APERION releases SmartFlow SDK for secure, on-prem AI governance without cloud reliance
APERION launched SmartFlow SDK, providing a secure, on-premises path for enterprises migrating away from compromised cloud-based AI gateways. The launch coincides with a 200% increase in web traffic since the March 24 LiteLLM supply chain attack that compromised an estimated 36% of all cloud environments. LiteLLM was the victim of a supply chain attack in…
AI, Apps, Global Security News, Government & Policy
Why AI lies, cheats and steals
You can’t trust AI. Even an information-obsessed, tech-savvy person such as yourself might be forgiven for believing that AI chatbots are on a smooth path of improvement with each passing month. But when it comes to their trustworthiness, that belief is dead wrong. New research by the UK government-backed Centre for Long-Term Resilience (CLTR) found…
AI, Data Breaches, Europe, Global Security News
Trivy supply chain attack enabled European Commission cloud breach
CERT-EU confirmed that ShinyHunters are behind the recent breach of the cloud infrastructure underpinning websites of the European Commission, and that they stole and subsequently leaked approximately 340 GB of data. “Analysis of the published dataset has so far confirmed the presence of personal data, including lists of names, last names, usernames, and email addresses,…
AI, APAC, Apps, Compliance, Endpoint, Global Security News, Government & Policy, Network Security, privacy, Risk Management
Microsoft 365 explained: Office 365, rebranded and expanded
Microsoft 365 arrived to much fanfare at its launch in July 2017, with Microsoft CEO Satya Nadella promising a “fundamental departure” in how the company thinks about product creation. Nearly nine years later, Microsoft 365 has become Microsoft’s core brand for workplace productivity software, having largely replaced the Office 365 branding long associated with the…
AI, Global Security News
Microsoft releases open-source toolkit to govern autonomous AI agents
AI agents can book travel, execute financial transactions, write and run code, and manage infrastructure without human intervention at each step. Frameworks like LangChain, AutoGen, CrewAI, and Azure AI Foundry Agent Service have made this kind of autonomy straightforward to deploy. The governance infrastructure to match that autonomy has lagged behind. Microsoft released the Agent…
AI, Global Security News
Click, wait, repeat: Digital trust erodes one login at a time
Sign-up forms that drag on, login steps that repeat, and access requests that take longer than expected have become a normal part of using digital services. These moments rarely stand out on their own, and over time they influence how people judge the systems they rely on. The 2026 Thales Digital Trust Index reflects that…
AI, Global Security News, Risk Management
New infosec products of the month: March 2026
Here’s a look at the most interesting products from the past month, featuring releases from Beazley, Bonfy.AI, Mend.io, Mimecast, NinjaOne, Novee, Intel 471, Singulr AI, Stellar Cyber, Teleport, and Vicarius. Beazley Exposure Management platform identifies external exposures and prioritizes cyber risk Beazley Security has announced its Exposure Management product, which delivers continuous, automated discovery and…
AI, Compliance, Global Security News, Network Security, Risk Management
Microsoft builds its own AI stack to help wean it from its reliance on OpenAI
Microsoft seems to be meeting OpenAI on its own turf, even as it continues its strategic partnership with the AI darling, with the release of three in-house, commercially-available AI models. MAI-Transcribe-1 (for speech transcription), MAI-Voice-1 (for voice generation), and MAI-Image-2 (for image creation) are now available on Microsoft Foundry and the MAI Playground. These new…
AI, Cybersecurity, Global Security News, Network Security, Risk Management
Cloudflare’s new CMS is not a WordPress killer, it’s a WordPress alternative
Cloudflare on Wednesday rolled out EmDash, which it described as “the spiritual successor to WordPress.” The security vendor positioned EmDash as a far more secure site building tool that avoids the extensive cybersecurity problems with WordPress plugins. But the Cloudflare claims go far beyond cybersecurity issues. The vendor is arguing that the very nature of…
AI, Cybersecurity, Global Security News, Network Security, Risk Management
Cloudflare’s new CMS is not a WordPress killer, it’s a WordPress alternative
Cloudflare on Wednesday rolled out EmDash, which it described as “the spiritual successor to WordPress.” The security vendor positioned EmDash as a far more secure site building tool that avoids the extensive cybersecurity problems with WordPress plugins. But the Cloudflare claims go far beyond cybersecurity issues. The vendor is arguing that the very nature of…
AI, Global Security News
Why OpenAI Decided to Buy TBPN, Tech’s Hottest News Show
The tech company’s surprise purchase of the web program underscores its efforts to help shape the narrative about AI.
AI, Global Security News
Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
A packaging error in Anthropic’s Claude Code npm release briefly exposed internal source code. This entry examines how threat actors rapidly weaponized the resulting attention, pivoting an existing AI-themed campaign to spread Vidar and GhostSocks.
AI, Cybersecurity, Exploits, Global Security News, Network Security, Risk Management
Cisco fixes critical IMC auth bypass present in many products
Cisco has released patches for a critical vulnerability in its out-of-band management solution, present in many of its servers and appliances. The flaw allows unauthenticated remote attackers to gain admin access to the Cisco Integrated Management Controller (IMC), which gives administrators remote control over servers even when the main OS is shut down. The vulnerability,…
AI, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
Crowdstrike 2026 Global Threat Report: Adversaries Use AI to Bypass Defenses
Attackers are moving faster, blending in better, and increasingly using AI to stay ahead of defenders. The Crowdstrike 2026 Global Threat Report highlights a shift toward stealthy, identity-driven attacks that are harder to detect and quicker to execute. “This is an AI arms race. Breakout time is the clearest signal of how intrusion has changed.…
AI, Apps, Compliance, Global Security News, Risk Management
Datadog Intros Experiments Product to Enable Testing at Scale
Datadog has announced the launch of Datadog Experiments, a new product that enables teams to design, launch, and measure product experiments and A/B tests directly within the Datadog platform. Embedding experimentation into observability The new product provides teams with the data and insights to understand how every change affects user behavior, application performance, and business…
AI, Cybersecurity, Global Security News
Geopolitics, AI, and Cybersecurity: Insights From RSAC 2026
AI-driven threats, global leadership shifts, and the future of cybersecurity in a rapidly evolving landscape were among the discussions at RSAC 2026 Conference.
AI, Compliance, Funding, Global Security News, Government & Policy, Risk Management
House Dems decry confirmed ICE usage of Paragon spyware
Immigration and Customs Enforcement has confirmed it is using Paragon spyware, prompting outrage Thursday from a trio of House Democrats. In response to a letter from the lawmakers inquiring about Paragon’s use, acting ICE Director Todd Lyons wrote that he had authorized the use of “cutting-edge technological tools” to help the Homeland Security Investigations division…
AI, Cybersecurity, Endpoint, Global Security News, Risk Management
GenAI Alone Isn’t Enough: Rethinking AI in Cybersecurity
As organizations accelerate their AI adoption, many are turning to generative AI (GenAI) as a cornerstone of their security strategy. But according to Melissa Ruzzi, Director of AI at AppOmni, relying on GenAI alone may create more gaps than it solves. “GenAI is non-deterministic and language-focused, so it’s not the most appropriate tool in certain…
AI, Apps, Cybersecurity, Global Security News, Government & Policy, Network Security, Risk Management
Four security principles for agentic AI systems
Agentic AI represents a qualitative shift in how software operates. Traditional software executes deterministic instructions. Generative AI responds to human prompts with output that humans review and use at their discretion. Agentic AI differs from both. Agents connect to software tools and APIs and uses large language models (LLMs) as reasoning engines to plan and…
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, Government & Policy, malware, Network Security, Risk Management
Claude Code Leak Exposes AI Supply Chain Threats
A leak involving Anthropic’s Claude Code has drawn attention from the cybersecurity and developer communities, exposing internal components of the AI coding agent and introducing potential risks for organizations. “The significance of this leak is in what the code reveals about AI agent architecture. The leak exposed approximately 512,000 lines of TypeScript across roughly 1,900…
AI, Global Security News
ShinyHunters Hackers Claim Theft of 3M+ Cisco Records, Threaten Public Leak
ShinyHunters hackers claim they stole 3 million+ Cisco records via Salesforce and AWS, warning of a public leak if demands are not met by April 3, 2026.
AI, Global Security News, Risk Management
Coro CEO Outlines SMB Security, MSP Shifts for 2026
AI-fueled cyberattacks are accelerating, and small and midsize businesses are increasingly caught in the crosshairs. At the same time, MSPs are under pressure to deliver stronger security outcomes with limited resources. In an interview with Channel Insider following RSAC 2026, Coro CEO Joe Sykora outlined how the threat landscape is evolving—and why automation, platform consolidation,…
AI, APAC, Apps, Global Security News, Network Security, Risk Management, Venture
March 2026 M&A Recap: SAP, Eaton Headline Month’s Deals
At the end of the first quarter of 2026, the channel saw several key acquisitions in March. Significant players in the channel have made these moves to help provide their customers with improved services, stronger solutions, and expanded expertise. Dive into the acquisitions from the month and don’t forget to catch up on February’s M&As,…
AI, Cybersecurity, Global Security News, Network Security
Hasbro hit by cyberattack, investigates possible data breach
Hasbro suffers a cyberattack, disrupting some operations; the company is probing the scope and potential data compromise. Toy giant Hasbro reported a cyberattack on Wednesday that disrupted certain company operations. The firm is investigating the full extent of the incident, including whether any files or sensitive data were compromised, as it works to restore normal…
AI, Global Security News
Lenovo Expands 360 Program with MSP, Services Focus
Lenovo is rolling out a series of updates to its Lenovo 360 partner program, aiming to simplify partner engagement, accelerate services-led growth, and expand opportunities for managed service providers (MSPs) in key global markets. The enhancements reflect Lenovo’s continued investment in its channel-first strategy as partners increasingly shift toward recurring revenue and outcome-based IT models.…
AI, Cybersecurity, Exploits, Global Security News, malware, Network Security
Cisco fixed critical and high-severity flaws
Cisco fixed critical flaws that could allow attackers to bypass authentication, run code, and gain access to sensitive data. Cisco released patches for two critical and six high-severity vulnerabilities. These flaws could let attackers bypass authentication, execute malicious code, escalate privileges, and access sensitive information. One of these critical flaws is CVE-2026-20093 (CVSS score of…
AI, Cybersecurity, Exploits, Global Security News, malware
Akira ransomware group can achieve initial access to data encryption in less than an hour
The Akira ransomware group has compromised hundreds of victims over the past year with a well-honed attack lifecycle that has whittled down the time from initial access to encryption of data in less than four hours, according to cybersecurity firm Halcyon. Akira has been active since 2023, racking up at least $245 million in ransom…
AI, Cybersecurity, Funding, Global Security News
Lawmakers renew push for Labor Department-backed cyber apprenticeship grants
With the country’s cybersecurity workforce still experiencing major shortages, a bipartisan, bicameral group of lawmakers is pushing to enlist the Department of Labor to help tackle the problem. The Cyber Ready Workforce Act would direct the DOL to establish a grant program that supports the “creation, implementation, and expansion of registered apprenticeship programs in cybersecurity,”…
AI, Apps, Exploits, Global Security News
Google Workspace’s continuous approach to mitigating indirect prompt injections
Posted by Adam Gavish, Google GenAI Security Team Indirect prompt injection (IPI) is an evolving threat vector targeting users of complex AI applications with multiple data sources, such as Workspace with Gemini. This technique enables the attacker to influence the behavior of an LLM by injecting malicious instructions into the data or tools used by…
AI, Compliance, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, privacy
Jamf warns of massive app insecurities
“Be wary then; best safety lies in fear,” said Laertes to sister Ophelia in William Shakespeare’s Hamlet. That’s a quote that should be on the desk of every business professional, as the digital environment is full of danger. Jamf provides us with a good look at what’s becoming a dangerous environment for Mac and iOS…
AI, Global Security News
Wanted: Head of Human AI Solutions. The New Jobs Being Created by AI
AI is raising big fears about employment losses, but it is also giving rise to new engineering and training jobs.
AI, Exploits, Global Security News
Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise
Cisco has released updates to address a critical security flaw in the Integrated Management Controller (IMC) that, if successfully exploited, could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system with elevated privileges. The vulnerability, tracked as CVE-2026-20093, carries a CVSS score of 9.8 out of a maximum of 10.0. “This
AI, APAC, Data Breaches, Global Security News, Government & Policy
Medtech giant Stryker says it’s back up after Iranian cyberattack
Medtech company Stryker says it’s back to being “fully operational,” three weeks after it became the most prominent victim to date of Iranian hackers, who said they attacked the Michigan-based company in retaliation over the conflict with the United States and Israel. A March 11 wiper attack from the pro-Palestinian, Iranian government-connected group Handala damaged…
AI, Global Security News
Software supply chain hacks trigger wave of intrusions, data theft
After linking the Axios npm supply chain attack to North Korean hackers, Google researchers warned that “hundreds of thousands of stolen secrets could potentially be circulating” as a result of this and the Trivy, KICS, LiteLLM, and Telnyx supply chain attacks (linked to TeamPCP). “This could enable further software supply chain attacks, software as a…
AI, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Government & Policy, malware, Network Security, Risk Management
Hasbro Cyberattack: Timeline, Impact, and Industry Implications
Hasbro, the Rhode Island-based toy and game company that owns brands like Monopoly, Play-Doh, Peppa Pig, and Transformers, said in late March 2026 that someone had broken into its network without permission. On March 28, the intrusion was found, and Hasbro had to take parts of its systems offline while investigators and cybersecurity experts worked…
AI, Apps, Cloud Security, Data Breaches, Endpoint, Global Security News, Network Security, Risk Management
Alleged Starbucks Incident Exposes Code and Firmware
A threat group is claiming to have breached Starbucks and stolen 10GB of sensitive data, including proprietary source code and firmware tied to its in-store machines and global operations. The group, ShadowByt3s, alleges it accessed a misconfigured Amazon S3 bucket and is now threatening to leak the data unless a ransom is paid. “The leak…
AI, Global Security News
Attempts to Exploit Exposed “Vite” Installs (CVE-2025-30208), (Thu, Apr 2nd)
From its GitHub repo: “Vite (French word for “quick”, pronounced /vi?t/, like “veet”) is a new breed of frontend build tooling that significantly improves the frontend development experience” [https://github.com/vitejs/vite]. This environment introduces some neat and useful shortcuts to make developers’ lives simpler. But as so often, if exposed, these features can be turned against you.…
AI, Global Security News
OpenSSH 10.3 patches five security bugs and drops legacy rekeying support
OpenSSH 10.3 shipped carrying five security fixes alongside feature additions and a set of behavior changes that will break compatibility with older SSH implementations that do not support rekeying. Rekeying compatibility removed SSH clients and servers that lack rekeying support will fail when they attempt to interoperate with OpenSSH going forward. The project removed the…
AI, Cybersecurity, Global Security News, Risk Management
NCSC Issues Security Alert Over Hackers Targeting WhatsApp and Signal Accounts
The UK’s cybersecurity agency offered advice to “high-risk’ individuals” on how to protect against social engineering and cyber-attacks
AI, Data Breaches, Global Security News
Yurei Ransomware Uses Common Tools, Adds Stranger Things References
Team Cymru details the Yurei ransomware campaign, using standard tools and a few Stranger Things–named payloads to breach and encrypt systems.
AI, Global Security News
Airwallex Appoints Elana Rubin As Australian Board Chair
And Adds Former NZ Prime Minister Bill English
AI, Global Security News, Government & Policy, malware, Russia
Threat actor UAC-0255 impersonate CERT-UA to spread AGEWHEEZE malware via phishing
Threat actors impersonated CERT-UA to send phishing emails with AGEWHEEZE malware, tricking victims into installing a fake “security tool.” A threat actor, tracked as UAC-0255, impersonated CERT-UA in a phishing campaign, sending emails to about 1 million users. The messages urged victims to download a password-protected archive from Files.fm and install a fake “specialized software,”…
AI, Exploits, Global Security News
Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime
Threat actors are exploiting vacant homes as “drop addresses” to intercept mail and enable fraud. Flare shows how postal services and fake identities are abused to turn mail into a fraud vector. […]
AI, Apps, Data Breaches, Exploits, Global Security News, Network Security, Risk Management
Cisco IMC Flaw Grants Unauthenticated Admin Access
A flaw in Cisco’s Integrated Management Controller (IMC) allows unauthenticated attackers to gain administrative access to affected UCS servers, which could potentially lead to full system compromise. The vulnerability “… could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system as Admin,” said Cisco in its advisory. Cisco IMC Flaw…
AI, Global Security News
New Progress ShareFile flaws can be chained in pre-auth RCE attacks
Two vulnerabilities in Progress ShareFile, an enterprise-grade secure file transfer solution, can be chained to enable unauthenticated file exfiltration from affected environments. […]
AI, Global Security News
Medtech giant Stryker fully operational after data-wiping attack
Stryker Corporation, one of the world’s leading medical technology companies, says it’s fully operational three weeks after many of its systems were wiped out in a cyberattack claimed by the Iranian-linked Handala hacktivist group. […]
AI, Compliance, Global Security News
Box Launches New AI Agent; Makes Box AI Studio Enhancement
Cloud storage company Box is announcing the launch of Box Agent, an AI-powered agent with reasoning and task-completion capabilities, along with enhancements to Box AI Studio. Box Agent promises context-based capabilities to iterate on corporate workflows The Box Agent acts as a unified AI engine across Box and autonomously understands a user’s intent from their…
AI, Global Security News
New Red Hat subscription simplifies long-term enterprise Linux support
Red Hat has announced Red Hat Enterprise Linux Extended Life Cycle Premium, a new subscription that provides a predictable 14-year life cycle for major Red Hat Enterprise Linux releases. This stand-alone subscription consolidates extended support, simplifying the management of multiple support streams. It helps organizations maintain their most sensitive, change-averse workloads on a single, hardened…
AI, Global Security News
Bank Trojan ‘Casbaneiro’ Worms Through Latin America
Augmented Marauder’s multipronged banking-Trojan cyber campaigns are targeting Spanish speakers, evading detection, and replicating rapidly.
AI, Compliance, Global Security News
ZeroEyes Expands AI Security Platform Beyond Gun Detection
ZeroEyes is expanding beyond its core AI gun-detection roots, rolling out new analytics capabilities and product lines to deliver a more unified physical security platform for enterprises, public sector organizations, and channel partners. ZeroEyes broadens platform beyond gun detection The Philadelphia-based company announced it is adding knife detection, suspect tracking, and a broader analytics suite…
AI, Global Security News
ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories
The latest ThreatsDay Bulletin is basically a cheat sheet for everything breaking on the internet right now. No corporate fluff or boring lectures here, just a quick and honest look at the messy reality of keeping systems safe this week. Things are moving fast. The list includes researchers chaining small bugs together to create massive backdoors, old software flaws
AI, Exploits, Global Security News
EvilTokens abuses Microsoft device code flow for account takeovers
A new phishing-as-a-service (PhaaS) campaign is abusing Microsoft’s device code authentication flow to gain unauthorized access to user accounts. Sekoia researchers first spotted the toolkit “EvilTokens” that lets attackers capture authentication tokens by tricking users into completing a legitimate login process in Microsoft’s own environment. The activity, observed since at least mid-February, relies on social…
AI, Cybersecurity, Global Security News, Risk Management
AI project ‘failure’ has little to do with AI
Reports galore about AI project failures suggest that generative AI (genAI) and Agentic AI are not yet ready for enterprise use. Although there is truth to that, enterprise AI project failures are rarely because of faulty algorithms and models. More often than not, management simply doesn’t understand the technology. Let’s define failure. In the context…
AI, Global Security News
The State of Trusted Open Source Report
In December 2025, we shared the first-ever The State of Trusted Open Source report, featuring insights from our product data and customer base on open source consumption across our catalog of container image projects, versions, images, language libraries, and builds. These insights shed light on what teams pull, deploy, and maintain day to day, alongside the vulnerabilities and
AI, Exploits, Global Security News
DarkSword exploit forces Apple to loosen its patching policy
Apple has extended security updates to a wider range of devices still running iOS 18, aiming to protect users from the DarkSword exploit kit. This is not the first time Apple has backported fixes for older devices based on vulnerability severity. Allowing iOS 18 users to receive patches without upgrading to iOS 26, however, signals…
AI, Global Security News
Critical Cisco IMC auth bypass gives attackers Admin access
Cisco has patched several critical and high-severity vulnerabilities, including an Integrated Management Controller (IMC) authentication bypass that enables attackers to gain Admin access. […]
AI, Global Security News, Risk Management
Why GitHub Developers Are Targeted by Token Giveaway Scams
GitHub developers face rising giveaway scams. Verify repos, links, and maintainers before acting. Avoid rushed clicks, fake rewards, and risky wallet actions.
AI, Compliance, Cybersecurity, Global Security News, malware, Network Security, Risk Management
From Reactive to Proactive: 5 Steps to SOC Maturity with Threat Intelligence
Reaching a higher level of SOC maturity takes better, more consistent decision-making during malware and phishing investigation. This requires a shift in how threat intelligence is used: not as a reference point, but as a core layer in the decision process. Moving from reactive to confidently proactive security means establishing a threat intelligence workflow that: Solve key challenges, from alert fatigue to blind spots Integrate across SOC workflows, supporting them Deliver compounding…
AI, Compliance, Cybersecurity, Global Security News, malware, Network Security, Risk Management
From Reactive to Proactive: 5 Steps to SOC Maturity with Threat Intelligence
Reaching a higher level of SOC maturity takes better, more consistent decision-making during malware and phishing investigation. This requires a shift in how threat intelligence is used: not as a reference point, but as a core layer in the decision process. Moving from reactive to confidently proactive security means establishing a threat intelligence workflow that: Solve key challenges, from alert fatigue to blind spots Integrate across SOC workflows, supporting them Deliver compounding…
AI, Global Security News
Robux pricing guide: cost per Robux & best purchase options
GUEST OPINION: Robux is the main currency that Roblox uses for players to buy avatar cosmetics, game passes, and to convert money into. Every bit of Robux has a set value to determine how much money it’s worth. With Roblox Premium, you can even get Robux as a monthly allowance! We’ll go over all of…
AI, Global Security News
WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action
Meta-owned messaging platform WhatsApp said it alerted about 200 users who were tricked into installing a bogus version of its iOS app that was infected with spyware. According to reports from Italian newspaper La Repubblica and news agency ANSA, the vast majority of the targets are located in Italy. It’s assessed that the threat actors behind the activity…
AI, Global Security News
Microsoft links Classic Outlook issue to email delivery problems
Microsoft is investigating a known issue that prevents some Classic Outlook users from sending emails via Outlook.com. […]
AI, Apps, Cybersecurity, Exploits, Global Security News, Government & Policy, Network Security, Risk Management
Cybersecurity in the age of instant software
AI is rapidly changing how software is written, deployed, and used. Trends point to a future where AIs can write custom software quickly and easily: “instant software.” Taken to an extreme, it might become easier for a user to have an AI write an application on demand — a spreadsheet, for example — and delete…
AI, Apps, china, Exploits, Global Security News, Government & Policy, malware, Network Security
TrueConf zero-day vulnerability exploited to target government networks
Suspected China-nexus attackers have leveraged a zero-day vulnerability (CVE-2026-3502) in the TrueConf client application to distribute malware within government networks in Southeast Asia, Check Point researchers discovered. Malicious client update attack chain (Source: Check Point) Trusted update mechanism turned into attack vector TrueConf is a videoconferencing platform designed to run on private local networks (LANs)…
AI, Apps, Global Security News, Risk Management
Slack’s AI updates signal shift towards agent orchestration
Slack has taken further steps to reposition Slackbot from a simple assistant to a more capable AI agent that can orchestrate workflows across external apps. The updates to Slackbot “signal a clear shift from a collaboration tool to what it hopes will become an operational layer for agentic work,” said Maria Bell, senior analyst,…
AI, Apps, Cybersecurity, Exploits, Global Security News, Government & Policy, privacy, Risk Management
Italian spyware vendor creates Fake WhatsApp app, targeting 200 users
WhatsApp blocked a fake app by Italian firm SIO/Asigint that targeted 200 users with spyware, urging them to reinstall the official app. WhatsApp has recently uncovered a malicious fake version of its app that targeted roughly 200 users, most of whom are in Italy. The platform confirmed that the unofficial client contained spyware and was…
AI, Exploits, Global Security News, Risk Management
Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit
Apple on Wednesday expanded the availability of iOS 18.7.7 and iPadOS 18.7.7 to a broader range of devices to protect users from the risk posed by a recently disclosed exploit kit known as DarkSword. “We enabled the availability of iOS 18.7.7 for more devices on April 1, 2026, so users with Automatic Updates turned on can automatically receive important security
AI, Apps, Global Security News, privacy
As cheap PCs vanish, enterprises might still find value in upgrades
Some enterprises might find that upgrading to newer, more expensive PCs is worth the investment since it appears cheap PCs won’t be coming anytime soon, analysts said. Dell and HP both have announced new business PCs that run Intel’s long-awaited Panther Lake chip, also called the Core Ultra Series 3; it has been touted as…
AI, Global Security News
Trust, friction, and ROI: A CISO’s take on making security work for the business
In this Help Net Security interview, John O’Rourke, CISO at PPG, talks about what it means for security to drive business value. He explains how mature security programs reduce friction in sales cycles and M&A processes, and how trust is built over time. O’Rourke also addresses how buyer sophistication has raised the bar for suppliers,…
AI, Apps, Global Security News
Microsoft adds high-volume email sending to Exchange Online
Organizations that rely on Exchange Online for internal communications have long needed a way to send large volumes of automated messages, such as payroll notifications, IT alerts, and security advisories, without running into the sending limits designed for person-to-person email. Microsoft has addressed that with the general availability of High Volume Email (HVE) in Exchange…
AI, Global Security News, Network Security, Risk Management
Your customer passed authentication. So why are they sending money to a scammer?
In this Help Net Security video, Lenny Gusel, Head of Fraud Solutions in North America at Feedzai, explains how customer identity and access management has converged with digital fraud detection, and why treating them as separate systems creates real risk. The core idea is continuous, contextual trust. Where traditional IAM grants access at a single…
AI, Apps, Compliance, Cybersecurity, Global Security News, Government & Policy, Risk Management
News Alert: TAC Security surpasses 10,000 customers, scaling global VM and AppSec platform
NEW YORK, Apr. 1, 2026, CyberNewswire—TAC Infosec, a global leader in cybersecurity (NSE: TAC), with presence across 100+ countries, announced a historic milestone by crossing 10,000 clients – 6,500+ of TAC Security and 3,500+ of CyberScope, since April 2024, delivering on its commitment to shareholders to achieve this by 2026. While building trusted access to…
AI, Apps, Cybersecurity, Exploits, Global Security News, Network Security, Risk Management
U.S. CISA adds a flaw in Google Dawn to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Google Dawn to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in Google Dawn, tracked as CVE-2026-5281 (CVSS score of 8.8), to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is a use after free in the Dawn…
AI, Cybersecurity, Data Breaches, Global Security News
Smashing Security podcast #461: This man hid $400 million in a fishing rod. Then it vanished
A cannabis-growing, beekeeping, gyrocopter-flying Irishman invested his drug money in Bitcoin back in 2011 – and now sits on a fortune worth $400 million. There’s just one small problem: the access codes were tucked inside his fishing rod case, which has mysteriously vanished. Or has it? Because this week, one of his frozen wallets suddenly…