Ukrainian entities have emerged as the target of a new campaign likely orchestrated by threat actors linked to Russia, according to a report from S2 Grupo’s LAB52 threat intelligence team. The campaign, observed in February 2026, has been assessed to share overlaps with a prior campaign mounted by Laundry Bear (aka UAC-0190 or Void Blizzard)…
Category: AI
AI, Global Security News, malware, Network Security
45,000 malicious IP addresses taken down, 94 suspects arrested
An international law enforcement operation has taken down more than 45,000 malicious IP addresses and servers linked to phishing, malware, and ransomware activity. The action was carried out as part of Operation Synergia III, an investigation that ran from July 18, 2025 to January 31, 2026. According to INTERPOL, the operation resulted in 94 arrests,…
AI, Data Breaches, Endpoint, Global Security News
JSOC IT’s AUTOPSY platform puts security stacks under live API verification
JSOC IT has announced the launch of AUTOPSY, a security verification platform that investigates an organization’s security stack through live API integrations before a breach occurs, rather than after one forces the conversation. The platform’s flagship product, READY, is a security assessment that replaces self-reported questionnaires with API-verified telemetry across an organization’s security stack, including…
AI, Apps, Exploits, Global Security News, Risk Management
Unprivileged users could exploit AppArmor bugs to gain root access
Researchers found nine “CrackArmor” flaws in Linux AppArmor that could let unprivileged users bypass protections, gain root privileges, and weaken container isolation. Qualys researchers disclosed nine vulnerabilities, collectively tracked as CrackArmor, in the Linux kernel’s AppArmor module. The flaws have existed since 2017 and could allow unprivileged users to bypass protections, escalate privileges to root,…
AI, Compliance, Cybersecurity, Global Security News, Network Security, Risk Management
What it takes to win that CSO role
CSO and CISO roles are among the hardest to fill in IT. Which should be good news for cybersecurity professionals that aspire to leadership positions as the organization’s top security exec. For those that do, the authority, clout, pay, and benefits are increasing significantly. But so too are the responsibility and accountability placed on cybersecurity…
AI, Global Security News
Certificate lifespans are shrinking and most organizations aren’t ready
The push for shorter TLS certificate lifespans has been building for years. It started with Google’s internal push toward 90-day certificates, which gained traction inside the industry before resistance from enterprise customers slowed things down. Then Apple proposed 47-day certificates, which reignited the debate and ultimately forced the CA/Browser Forum to set a formal schedule.…
AI, Exploits, Global Security News, malware, Russia
ClickFix techniques evolve in new infostealer campaigns
Cybercriminals are combining compromised websites with increasingly sophisticated ClickFix social engineering lures to deliver new infostealer malware, with one campaign alone weaponizing more than 250 WordPress sites across 12 countries. The campaign leads to stealthy in-memory payloads, while a separate attack detected by Microsoft targets Windows Terminal for payload execution instead of the traditional Run…
AI, Cybersecurity, Global Security News, Risk Management
What smart factories keep getting wrong about cybersecurity
In this Help Net Security interview, Packsize CSO Troy Rydman breaks down the biggest vulnerabilities in smart factory environments today, from IoT devices and legacy systems to human error. He explains how unmanaged devices, from sensors to robotic components, often go unpatched and become entry points for attackers. Legacy infrastructure is frequently overlooked as organizations…
AI, Global Security News
Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware Abuse
Google is testing a new security feature as part of Android Advanced Protection Mode (AAPM) that prevents certain kinds of apps from using the accessibility services API. The change, incorporated in Android 17 Beta 2, was first reported by Android Authority last week. AAPM was introduced by Google in Android 16, released last year. When…
AI, Global Security News
VulHunt: Open-source vulnerability detection framework
Binarly has published VulHunt Community Edition, making the core scanning engine from Binarly’s commercial Transparency Platform available to independent researchers and practitioners. What VulHunt does VulHunt Community Edition is a framework for detecting vulnerabilities in compiled software. It operates against multiple binary representations simultaneously, working across disassembly, an intermediate representation layer, and decompiled code. Targets…
AI, Global Security News
Fake scandal clips on Facebook bait victims into investment scams
Bitdefender researchers uncovered hundreds of scam campaigns promoted through Facebook ads that use fake news stories, celebrity impersonation, and redirect chains to funnel victims into investment fraud schemes. The activity ran through 310 malvertising campaigns distributed on Meta platforms from February 9 to March 5, 2026. The campaigns generated more than 26,000 ad sightings with…
AI, Apps, Compliance, Data Breaches, Exploits, Global Security News, Risk Management
When insider risk is a wellbeing issue, not just a disciplinary one
Written by Katie Barnett, Director of Cyber Security at Toro Solutions Insider risk is still often framed around intent, with the focus placed on malicious employees, disgruntled contractors, or deliberate misuse of access for personal gain.Those cases exist and they matter, but they are rarely where risk first begins, and they do not reflect how…
AI, Global Security News
Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack
Warlock continues to enhance its attack chain with new tactics to improve persistence, lateral movement, and defense evasion using an expanded toolset: TightVNC Yuze, and a persistent BYOVD technique leveraging the NSec driver.
AI, Global Security News
TrendAI™ Supports Global Law Enforcement Efforts
Learn how TrendAI™ and our researchers contributed threat intelligence and analysis to support INTERPOL against cybercrime.
AI, Global Security News, privacy
OpenAI says ChatGPT ads are not rolling out globally for now
OpenAI told BleepingComputer that ChatGPT ads on Free and Go plans are not yet rolling out outside the United States, even though some users noticed references to ads in the updated privacy policy. […]
AI, Apps, Global Security News
Maxon and Tencent Cloud Partner to push 3D boundaries with Artist First Generative AI
At Mobile World Congress (MWC) 2026, Tencent Cloud, the cloud business of global technology company Tencent, announced its partnership with Maxon, a leading provider of professional software solutions for 3D design, motion graphics, and visual effects, among other creative applications. This partnership introduces powerful generative AI capabilities designed to augment the creative process, putting the artist…
AI, Data Breaches, Global Security News, malware
Payload Ransomware claims the hack of Royal Bahrain Hospital
The Payload Ransomware group claims to have breached the Royal Bahrain Hospital (RBH), a leading healthcare facility in Bahrain. The Payload Ransomware group claims to have hacked the Royal Bahrain Hospital (RBH) and stolen 110 GB of data. The ransomware gang added the healthcare facility to its Tor data leak site and published the images…
AI, Global Security News
Australian consumers fed up with lazy AI content from brands
Aussie shoppers demand authenticity as new research warns AI slop is one of the top threats to brand trust
AI, Global Security News, Network Security
Equinix Unveils the Distributed AI Hub to Simplify and Secure Enterprise AI Infrastructure
COMPANY NEWS: Integrated with Palo Alto Networks to deliver real-time threat detection for AI workloads
AI, Exploits, Global Security News, malware, Russia
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 88
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages Inside Coruna: Reverse Engineering a Nation-State iOS Exploit Kit From JavaScript ClipXDaemon: Autonomous X11 Clipboard Hijacker Delivered via Bincrypter-Based Loader New A0Backdoor Linked to…
AI, china, Cybersecurity, Data Breaches, Europe, Exploits, Global Security News, malware, Network Security, Russia
Security Affairs newsletter Round 567 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Starbucks data breach impacts 889 employees Storm-2561 lures victims to spoofed VPN sites to harvest corporate…
AI, Global Security News
UiPath Expands Strategic Alliance with Deloitte to Launch Agentic ERP
COMPANY ANNOUNCEMENT: New Agentic ERP offering embeds AI-enabled orchestration to drive autonomous enterprise operations
AI, Global Security News
Going Electric?
Plus: The $599 MacBook Neo reviewed, the teens running a billion-dollar AI startup, electric-grid blues, and more.
AI, Global Security News, malware
Bitdefender Uncovers “Vibeware”: A New AI-Driven APT Attack Strategy Flooding South Asia with Polyglot Implants
Bitdefender have uncovered a new AI-assisted malware development model dubbed “vibeware”, revealing how a Pakistan-aligned threat actor is industrialising cyberattacks across South Asia by rapidly generating large volumes of disposable malware variants.
AI, Global Security News
Cloudwerx Joins OpenAI Services Partner Program to Deliver Enterprise Agentic AI
COMPANY NEWS: Cloudwerx, a leading Australian provider of advanced data, analytics and Generative AI services, today announced it has joined the OpenAI Services Partner program, reflecting its expertise in designing, deploying and governing production-grade agentic systems using OpenAI models and APIs.
AI, Global Security News, Risk Management
KnowBe4 Research Reveals Over Half of Australians Prioritise Work Accounts Over Personal Security
GUEST RESEARCH: New study finds 76% of Australians feel confident spotting cyber threats, but risky habits like password reuse and credential sharing remain widespread
AI, Global Security News
Australian Manufacturers close 2025 Strong After Volatile Year
GUEST RESEARCH: Key figures: $619k average revenue, only a minor 1.0% dip from Q3 Profit margins remained resilient at 38.47% Stock on Hand (SOH) dropped to an average of $233,763 from over $300k Purchase order values surged 22% to an average of $415k Lead times remained low at 17 days, well below 2024 averages Australian…
AI, Global Security News
Humanforce Launches Behaviour-Driven Recognition for Frontline Workforces
Humanforce, a leading global provider of intelligent, AI-driven human capital management (HCM) solutions for frontline workforces, today announced the launch of Rewards & Recognition, new capabilities within Humanforce Benefits that use workforce data and event-triggered automation to recognise and reward frontline employees for everyday behaviours that drive operational performance.
AI, Global Security News
Tenable Appoints Dino DiMarino as Chief Revenue Officer
COMPANY ANNOUNCEMENT: Strategic growth leader to accelerate Tenable’s AI exposure management market opportunities worldwide
AI, Global Security News
Global Study Exposes Critical Gap Between Cyberattack Detection and Containment
GUEST RESEARCH: 95% are confident they can detect attacks, but nearly half struggle to stop them as AI-driven threats accelerate
AI, Apps, Global Security News
F5 advances enterprise application security for the AI and post-quantum era
New security innovations in the F5 Application Delivery and Security Platform unify AI-driven protection, zero trust access, and post-quantum readiness across hybrid multicloud environments
AI, Global Security News
Snowflake Research Reveals AI-Driven Job Creation Outpaces Job Loss across Australia and New Zealand, with 74% Reporting Workforce Gains
GUEST RESEARCH: AI’s workforce impact is more nuanced than headlines suggest, with 74% of A/NZ organisations reporting AI-driven job creation compared to 50% reporting job losses A/NZ workers were most likely to use Gen AI tools without company approval with 67% reporting use of non-approved tools, suggesting pent-up demand A/NZ organisations, more than any other…
AI, Global Security News
WinDC and Armada join forces to turn Australia’s renewable energy advantage into a global AI hub
COMPANY NEWS: Australia’s first portable AI factory has arrived in Australia, built on clean energy that the national grid cannot absorb and positioned to attract global technology investment to Australian soil.
AI, Cybersecurity, Global Security News
How to Choose the Best Security Companies in Fort Worth for Your Business
In this post, I will show how to choose the best security companies in Fort Worth for your business. Fort Worth is one of the fastest-growing business hubs in Texas. From commercial offices and warehouses to retail centers and construction projects, businesses across the city require reliable protection. Choosing the right security companies in Fort…
AI, Cybersecurity, Global Security News, malware
Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Turning expertise into opportunity for women in cybersecurity Speaker diversity in cybersecurity has been a talking point for over a decade, with panels, pledges, and dedicated conference tracks failing to produce change. Stages still skew heavily male, even as women…
AI, Apps, Compliance, Global Security News, Government & Policy, Network Security, Risk Management
MY TAKE: The AI magic is back — whether it endured depends on Amazon’s next moves
I ran an experiment this week that I did not expect to be instructive, and it was. Related: How ChatGPT is becoming Microsoft Office The setup was simple. I had been working through a spontaneous personal essay — about cognitive overload, AI, and the specific anxiety of not knowing whether a memory lapse is a…
AI, Apps, Compliance, Endpoint, Global Security News, Network Security
Deploy AWS applications and access AWS accounts across multiple Regions with IAM Identity Center
If your organization relies on AWS IAM Identity Center for workforce access, you can now extend that access across multiple AWS Regions with multi-Region replication. Previously, AWS access portal was only available in one Region, when you add an additional Region, users get an active access portal endpoint there. If the primary Region experiences a…
AI, Data Breaches, Global Security News
Starbucks data breach impacts 889 employees
Starbucks disclosed a breach after phishing attacks on its employee portal led to unauthorized access to Partner Central accounts, exposing staff data. Starbucks reported a data breach affecting hundreds of employees after phishing attacks targeted its Partner Central employee portal. The security breach was detected on February 6, the incident involved unauthorized access to staff…
AI, china, Global Security News, Network Security
OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration
China’s National Computer Network Emergency Response Technical Team (CNCERT) has issued a warning about the security stemming from the use of OpenClaw (formerly Clawdbot and Moltbot), an open-source and self-hosted autonomous artificial intelligence (AI) agent. In a post shared on WeChat, CNCERT noted that the platform’s “inherently weak default security configurations,” coupled with its
AI, Global Security News
AppsFlyer Web SDK used to spread crypto stealer JavaScript code
Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack. […]
AI, Global Security News
Review: Does the $599 MacBook Neo Fit in Your Life?
Comparing Apple’s new budget laptop to the new M5 MacBook Air plus a comparable Chromebook and Windows PC.
AI, Cybersecurity, Global Security News
GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers
Cybersecurity researchers have flagged a new iteration of the GlassWorm campaign that they say represents a “significant escalation” in how it propagates through the Open VSX registry. “Instead of requiring every malicious listing to embed the loader directly, the threat actor is now abusing extensionPack and extensionDependencies to turn initially standalone-looking extensions into transitive
AI, Data Breaches, Global Security News
ShinyHunters Claims 1 Petabyte Data Theft from Telecom Giant Telus
ShinyHunters claims it stole up to 1 petabyte of data from Telus Digital, including support recordings, code, and employee records after a breach.
AI, Global Security News, malware
Storm-2561 lures victims to spoofed VPN sites to harvest corporate logins
Attackers linked to Storm-2561 use SEO-poisoned search results to lure users to fake Ivanti, Cisco, and Fortinet VPN sites that steal corporate login credentials. In mid-January 2026, Microsoft Defender Experts uncovered a credential-theft campaign attributed to Storm-2561. Threat actor is spreading fake enterprise VPN clients impersonating Ivanti, Cisco, and Fortinet software. By poisoning search engine…
AI, Cybersecurity, Global Security News, Government & Policy, malware, Network Security
Interpol – Operation Synergia III leads to 45,000 malicious IPs dismantled and 94 arrests worldwide
INTERPOL dismantled 45,000 malicious IPs and servers and arrested 94 suspects in a global cybercrime operation. INTERPOL announced a global cybercrime operation (codenamed Operation Synergia III) involving 72 countries that dismantled 45,000 malicious IP addresses and servers linked to phishing, malware, and ransomware. The international law enforcement operation led to 94 arrests, 110 ongoing investigations,…
AI, Endpoint, Global Security News, malware
SmartApeSG campaign uses ClickFix page to push Remcos RAT, (Sat, Mar 14th)
Introduction This diary describes a Remcos RAT infection that I generated in my lab on Thursday, 2026-03-11. This infection was from the SmartApeSG campaign that used a ClickFix-style fake CAPTCHA page. My previous in-depth diary about a SmartApeSG (ZPHP, HANEYMANEY) was in November 2025, when I saw NetSupport Manager RAT. Since then, I’ve fairly consistently seen…
AI, APAC, Global Security News
Microsoft shuffles leadership as Copilot and AI agents reshape its core products
Microsoft is undergoing a regime change that could have a direct impact on its core business. Rajesh Jha, EVP for experiences and devices, which covers Microsoft 365 and Windows, has announced his retirement, and a succession plan. Jha will “transition out” on July 1 but remain in an advisory capacity. Interestingly, the company is appointing…
AI, Cybersecurity, Exploits, Global Security News, Network Security, Risk Management
U.S. CISA adds Google Chrome flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chrome flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two Google Chrome flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: CVE-2026-3909 Google Skia Out-of-Bounds Write Vulnerability CVE-2026-3910 Google Chromium V8 Unspecified Vulnerability This…
AI, china, Compliance, Global Security News, Network Security
Data mining? Old servers could become new source of rare earths
The retirement of old server equipment from data center facilities could become an opportunity for enterprises to generate revenue, instead of being an often costly recycling expense. Last year Western Digital announced it was experimenting with new ways to extract valuable rare earth elements and metals from obsolete servers from Microsoft’s US data centers, as…
AI, APAC, Apps, Exploits, Global Security News, Network Security, Risk Management
For March, Patch Tuesday delivers fixes for 83 vulnerabilities
The team at Readiness each month analyzes the latest Patch Tuesday updates from Microsoft and provides detailed, actionable testing guidance. The March release addresses 83 vulnerabilities across Windows, Office, SQL Server, Azure, and .NET — a moderate volume with two publicly disclosed zero-days affecting SQL Server and .NET (though neither is being actively exploited in…
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
AiLock Ransomware Claims England Hockey Data Breach
England Hockey is investigating a potential cyberattack after a ransomware group claimed to have stolen sensitive data from its systems and threatened to publish it online. The AiLock ransomware gang recently listed the organization on its public data leak site, claiming to have exfiltrated large volumes of internal data as part of the attack. “We…
AI, Global Security News, malware
FBI seeks victims of Steam games used to spread malware
The FBI is asking gamers who installed Steam titles containing malware to provide information as part of an ongoing investigation into eight malicious games uploaded to the gaming platform. […]
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, Network Security, Risk Management
Starbucks HR Portal Breach Exposes Employee Information
Starbucks has disclosed a data breach affecting hundreds of employees after attackers accessed internal HR accounts through phishing websites impersonating the company’s employee portal. This incident exposed sensitive personal and financial information, raising concerns about potential identity theft and fraud. “The investigation has determined that an unauthorized third party accessed certain Starbucks Partner Central accounts…
AI, Endpoint, Exploits, Global Security News, Network Security, Risk Management
Google warns of two actively exploited Chrome zero days
Threat actors are exploiting two high severity zero day vulnerabilities in the Chrome browser that experts say IT teams must patch immediately. Google has issued emergency patches for the two holes, CVE-2026-3909 and CVE-2026-3910. This comes just days after the release of 29 fixes for holes as part of March Patch Tuesday, and a zero day…
AI, Endpoint, Exploits, Global Security News, Network Security, Risk Management
Google warns of two actively exploited Chrome zero days
Threat actors are exploiting two high severity zero day vulnerabilities in the Chrome browser that experts say IT teams must patch immediately. Google has issued emergency patches for the two holes, CVE-2026-3909 and CVE-2026-3910. This comes just days after the release of 29 fixes for holes as part of March Patch Tuesday, and a zero day…
AI, Data Breaches, Europe, Global Security News, Government & Policy, Russia
Hackers targeted Poland’s National Centre for Nuclear Research
Hackers targeted Poland’s National Centre for Nuclear Research, but security systems detected and blocked the attack before any damage. The National Centre for Nuclear Research in Poland reported a cyberattack on its IT infrastructure. The intrusion attempt was quickly detected by security systems, allowing staff to secure the targeted systems and prevent any operational impact.…
AI, Cybersecurity, Global Security News, malware
WatchGuard CEO on 30 Years and the Future of MSP Security
WatchGuard is marking its 30th year in business, a milestone that CEO Joe Smolarski says highlights both the company’s longevity and the continued importance of the IT channel. In an interview with Channel Insider, Smolarski reflected on WatchGuard’s history working with managed service providers (MSPs), the evolving cybersecurity landscape, and why the vendor plans to…
AI, Exploits, Global Security News, Government & Policy, Risk Management
DoW Anthropic Dispute Spotlights AI Supply Chain Risk
The decision by the U.S. Department of War to label Anthropic a supply chain risk has sparked a wider debate across the sector about how organizations should approach artificial intelligence deployment, what they can manage, and the best practices needed to minimize security risks. When AI is deeply embedded in workflows, its absence is clear…
AI, Cybersecurity, Global Security News, Government & Policy, Network Security, Risk Management
AI Facial Recognition Error Jails Tennessee Grandmother for Months
A Tennessee grandmother spent nearly six months in jail after a facial recognition system incorrectly identified her as a suspect in a bank fraud investigation in North Dakota, more than 1,200 miles from her home. The case is drawing renewed scrutiny around the risks of relying heavily on artificial intelligence in criminal investigations. “I’ve never…
AI, Europe, Global Security News, Risk Management
European companies warn EU leaders: reduced reliance on US tech could hurt profitability
Several European companies are warning that the EU’s increased focus on technological sovereignty could hurt both profitability and competitiveness and argue it will be difficult to quickly reduce dependence on US tech firms, the Financial Times reports. The European Commission is currently working on a new package for technological sovereignty aimed at reducing Europe’s dependence…
AI, Apps, Data Breaches, Endpoint, Exploits, Global Security News, Network Security, Risk Management
Google Patches Two Chrome Zero-Day Vulnerabilities Actively Exploited in the Wild
Google has released updates to patch two high-severity zero-day vulnerabilities in the Chrome browser that are already being exploited in the wild.. The flaws affect critical components responsible for rendering web content and executing JavaScript, potentially allowing attackers to crash the browser or execute malicious code on vulnerable systems. One of the vulnerabilities, CVE-2026-3909, allows…
AI, Global Security News
‘CrackArmor’ Vulnerability in AppArmor Impacts 12.6M Linux Systems
Qualys uncovers ‘CrackArmor’ vulnerabilities in AppArmor that could expose 12.6M Linux systems to root access and container escapes.
AI, china, Global Security News, Network Security
Chinese Hackers Target Southeast Asian Militaries with AppleChris and MemFun Malware
A suspected China-based cyber espionage operation has targeted Southeast Asian military organizations as part of a state-sponsored campaign that dates back to at least 2020. Palo Alto Networks Unit 42 is tracking the threat activity under the moniker CL-STA-1087, where CL refers to cluster, and STA stands for state-backed motivation. “The activity demonstrated strategic operational…
AI, Global Security News
Meta to Shut Down Instagram End-to-End Encrypted Chat Support Starting May 2026
Meta has announced plans to discontinue support for end-to-end encryption (E2EE) for chats on Instagram after May 8, 2026. “If you have chats that are impacted by this change, you will see instructions on how you can download any media or messages you may want to keep,” the social media giant said in a help…
AI, Global Security News
Adobe CEO steps down after 18 years
It’s all change at the top for Adobe as CEO Shantanu Narayen is stepping down after 18 years. He will relinquish the role as soon as a successor has been found, although he will continue to serve as Chairman Narayen left as the company posted record revenue of $6.4 billion in its first quarter, with…
AI, Global Security News
Microsoft investigates classic Outlook sync and connection issues
Microsoft is investigating several issues causing email synchronization and connection problems when using the classic Outlook desktop client. […]
AI, Apps, Global Security News
Yes, you can run Windows on a MacBook Neo
Remember the good old days of 2020 when Apple’s then-new M1 Macs were setting fresh records for Mac performance? You might also recall when those same Macs were described as being the fastest PCs to run Windows when using the Parallels virtualization software. If you recall that, and if light use of legacy Windows utilities or tools is…
AI, Global Security News, Government & Policy, Network Security, Risk Management
Cyber criminals too are working from home… your home
The FBI is so concerned about the threat of residential proxy attacks and the dangers posed by cyber criminals using the technique that it has posted guidance on its website. Residential proxies are used by cybercriminals to reroute traffic between individuals and the websites they visit to make it appear to originate elsewhere? By taking…
AI, Global Security News, Government & Policy, Network Security, Risk Management
Cyber criminals too are working from home… your home
The FBI is so concerned about the threat of residential proxy attacks and the dangers posed by cyber criminals using the technique that it has posted guidance on its website. Residential proxies are used by cybercriminals to reroute traffic between individuals and the websites they visit to make it appear to originate elsewhere? By taking…
AI, Global Security News
Interpol’s ‘Operation Synergia III’ Nets 94 Arrests in Major Cybercrime Sweep
A new law enforcement operation against phishing and ransomware operators led to the takedown of 45,000 malicious IP addresses
AI, Apps, Cybersecurity, Endpoint, Exploits, Global Security News, Network Security, Risk Management
OT Security: The New Attack Surface of AI-Powered Robots
Humanoid robots are arriving with enterprise-friendly components — Wi-Fi, cameras, onboard compute, and over-the-air software updates — but they behave less like traditional IT devices and more like operational technology (OT) systems. They interact with the physical world, operate under strict latency constraints, and can cause real harm if something goes wrong. That convergence is…
AI, Apps, Data Breaches, Endpoint, Exploits, Global Security News, Network Security, Risk Management
Hack the AI Brain: LangSmith Vulnerability Could Expose Sensitive AI Data
A vulnerability in LangSmith, a widely used AI observability platform, could have allowed attackers to hijack user accounts and access sensitive enterprise data flowing through large language model (LLM) systems. Researchers at Miggo Security discovered the flaw, which could allow token theft and account takeover if a logged-in user visited a malicious webpage. The vulnerability…
AI, Global Security News
What Are Your Bots Working On?
Plus, Microsoft’s new AI health tool and the billion-dollar startup founded by teenagers.
AI, Global Security News, malware, Network Security
INTERPOL Dismantles 45,000 Malicious IPs, Arrests 94 in Global Cybercrime
INTERPOL on Friday announced the takedown of 45,000 malicious IP addresses and servers used in connection with phishing, malware, and ransomware campaigns, as part of the agency’s ongoing efforts to dismantle criminal networks, disrupt emerging threats, and safeguard victims from scams. The effort is part of an international law enforcement operation that involved 72 countries…
AI, Apps, Europe, Exploits, Global Security News, malware, Network Security, Risk Management
US and European authorities disrupt socksEscort proxy service tied to AVrecon botnet
Authorities in the US and Europe disrupted the SocksEscort proxy service, which used the AVrecon botnet and infected about 360,000 devices since 2020. Law enforcement agencies in the US and Europe have disrupted SocksEscort, a malicious proxy service powered by the AVrecon botnet. Active since 2020, the service hijacked roughly 360,000 devices and allowed cybercriminals…
AI, Apps, Cybersecurity, Global Security News, Network Security
AWS Leader on Cloud Lessons and AI’s Next Wave
Twenty years after Amazon Web Services began reshaping enterprise infrastructure, the company’s partner ecosystem is entering another major transition—this time driven by artificial intelligence. In an interview with Channel Insider, Brian Bohan, director and global lead of the AWS Consulting Center of Excellence, discussed how lessons from the early cloud era are shaping AWS’s approach…
AI, Global Security News, Risk Management
From VMware to what’s next: Protecting data during hypervisor migration
Hypervisor migrations can introduce hidden risks that threaten data availability and recovery. Acronis explains why verified backups and cross-platform recovery are essential during VMware transitions. […]
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
AI Risks, Critical Vulnerabilities, and Data Breaches Define This Week in Cybersecurity
Major Threats & Vulnerabilities Critical Software and Platform Flaws A SQL injection flaw in Elementor’s Ally accessibility plugin exposed over 400,000 WordPress sites to potential data theft. The vulnerability stemmed from improper input sanitization, allowing attackers to extract sensitive database information. Administrators should update immediately to the patched version. Microsoft’s March Patch Tuesday addressed a…
AI, Global Security News, Network Security
Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials
Microsoft has disclosed details of a credential theft campaign that employs fake virtual private network (VPN) clients distributed through search engine optimization (SEO) poisoning techniques. “The campaign redirects users searching for legitimate enterprise software to malicious ZIP files on attacker-controlled websites to deploy digitally signed trojans that masquerade as trusted VPN clients
AI, Cybersecurity, Endpoint, Exploits, Global Security News, malware, Risk Management
CVE-2026-3910: Chrome V8 Zero-Day Used for In-the-Wild Attacks
Chrome zero-days continue to pose a major risk for cyber defenders. Earlier this year, Google patched CVE-2026-2441, the first actively exploited Chrome zero-day of 2026. Now, another emergency update has been released, fixing two more flaws already exploited in the wild, CVE-2026-3910 in Chrome’s V8 JavaScript and WebAssembly engine and CVE-2026-3909, an out-of-bounds write bug…
AI, Cybersecurity, Global Security News
Investigating a New Click-Fix Variant
Disclaimer: This report has been prepared by the Threat Research Center to enhance cybersecurity awareness and support the strengthening of defense capabilities. It is based on independent research and observations of the current threat landscape available at the time of publication. The content is intended for informational and preparedness purposes only. Read more blogs around…
AI, Global Security News, malware
Real-Time Banking Trojan Strikes Brazil’s Pix Users
The latest banking Trojan campaign to hit Brazil combines classic malware with a real-time human operator, waiting for the perfect moment to strike.
AI, Global Security News
SQL Injection Vulnerability in Ally WordPress Plugin Exposes 200K+ Sites
SQL injection flaw in Ally WordPress plugin exposes 200,000+ sites to data theft. Patch released, but most installations remain unpatched and vulnerable.
AI, Compliance, Global Security News
Registration Open for Avalara NEXT 2026: Exploring the Future of Agentic Tax and Compliance
GUEST EVENT: Virtual event on March 26 will highlight agentic AI, new developer tools, and partner ecosystem innovation
AI, Exploits, Global Security News
Veeam warns admins to patch now as critical RCE flaws hit Backup & Replication
Backup vendor Veeam has released security updates to patch multiple vulnerabilities in its widely used Backup and Replication platform, including three critical flaws that could allow authenticated users to execute code on backup servers. Detailed in the company’s advisory KB4830, the vulnerabilities affect Veeam Backup & Replication 12.3.2.4165 and earlier version 12 builds, with fixes…
AI, Global Security News
IAG New Zealand Future-Proofs Claims Operations with Guidewire Cloud Platform
COMPANY ANNOUNCEMENT: IAG New Zealand and Guidewire (NYSE: GWRE) announced that IAG New Zealand has reached a major milestone in its technology modernisation journey, migrating its on-premises implementation of Guidewire ClaimCentre to Guidewire Cloud Platform as part of its future-proofing program.
AI, Global Security News, malware, Network Security, Risk Management
AI-assisted Slopoly malware powers Hive0163’s ransomware campaigns
The Hive0163 group used AI-assisted malware called Slopoly to maintain persistent access in ransomware attacks. IBM X-Force researchers report that the financially motivated group Hive0163 is using AI-assisted malware named Slopoly to maintain persistent access during ransomware attacks, showing how threat actors can quickly build new malware frameworks using AI. Hive0163 is a threat actor…
AI, Exploits, Global Security News
Google fixed two new actively exploited flaws in the Chrome browser
Google addressed two high-severity vulnerabilities in the Chrome browser that have been exploited in attacks in the wild. Google has released security updates to address two high-severity vulnerabilities, tracked as CVE-2026-3909 and CVE-2026-3910, in the Chrome browser. The company is aware of attacks in the wild exploiting both flaws. “Google is aware that exploits for…
AI, Exploits, Global Security News, Network Security
Authorities dismantle SocksEscort proxy network behind millions in fraud
SocksEscort, a residential proxy network used to exploit thousands of compromised home routers worldwide and facilitate large-scale fraud that cost victims millions of dollars, has been disrupted in an international law enforcement operation led by the U.S. Department of Justice. The domain seizure notice Law enforcement agencies seized 34 domains and 23 servers located in…
AI, Apps, Cybersecurity, Global Security News
The Future of Custom Software Development in a Security-First World
In this post, I will talk about the future of custom software development in a security-first world. Digital transformation has accelerated at an unprecedented pace over the past decade. Organizations across industries now rely on software platforms to manage operations, deliver customer experiences, and power business innovation. From cloud-native applications and AI-driven systems to connected…
AI, Exploits, Global Security News
Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8
Google on Thursday released security updates for its Chrome web browser to address two high-severity vulnerabilities that it said have been exploited in the wild. The list of vulnerabilities is as follows – CVE-2026-3909 (CVSS score: 8.8) – An out-of-bounds write vulnerability in the Skia 2D graphics library that allows a remote attacker to perform…
AI, Compliance, Data Breaches, Data Security, Endpoint, Global Security News, Network Security, Risk Management
Beyond File Servers: Securing Unstructured Data in the Era of AI
File servers still exist for legacy storage and governance, but most modern workflows now happen in collaboration tools, code platforms, chats, and AI systems. File servers remain, but they are no longer central to operations. They still appear important on paper: legacy project shares with strict permissions, legal drives with structured folders, and network areas…
AI, Global Security News, Network Security, Risk Management
Hybrid resilience: Designing incident response across on-prem, cloud and SaaS without losing your mind
I used to think hybrid incidents would get easier once we standardized on “one tool”: one monitoring platform, one ticketing system, one on-call process. After a few real outages, I changed my mind. Hybrid response fails at the seams between ownership models: on-prem teams, cloud teams, security, vendors. Each group can be correct inside its…
AI, Apps, Endpoint, Exploits, Global Security News, malware, Network Security
Storm-2561 targets enterprise VPN users with SEO poisoning, fake clients
Microsoft has warned enterprises that cybercriminal group Storm-2561 is hijacking search engine results to serve trojanized VPN clients, stealing corporate credentials, and then covering its tracks before victims suspect anything is wrong. The group pushes spoofed websites to the top of results for queries such as “Pulse VPN download” or “Pulse Secure client,” redirecting users…
AI, Global Security News, Risk Management
BioCatch DeviceIQ helps banks spot risky devices before login
BioCatch has announced the launch of DeviceIQ, a comprehensive new device identification and intelligence product that transforms how financial institutions evaluate the trustworthiness of devices used for digital banking. Traditional device identification has grown increasingly unreliable. Criminals utilize sophisticated evasion techniques (emulators, device spoofing, cloaked browsers, jailbroken devices, and data-wiping) to commit fraud repeatedly from…
AI, Cybersecurity, Exploits, Global Security News
Nine CrackArmor Flaws in Linux AppArmor Enable Root Escalation, Bypass Container Isolation
Cybersecurity researchers have disclosed multiple security vulnerabilities within the Linux kernel’s AppArmor module that could be exploited by unprivileged users to circumvent kernel protections, escalate to root, and undermine container isolation guarantees. The nine confused deputy vulnerabilities have been collectively codenamed CrackArmor by the Qualys Threat Research Unit (TRU). The
AI, Data Breaches, Global Security News
Starbucks discloses data breach affecting hundreds of employees
Starbucks has disclosed a data breach affecting hundreds of employees after threat actors gained access to their Starbucks Partner Central accounts. […]
AI, Apps, Global Security News, Russia
A React-based phishing page with credential exfiltration via EmailJS, (Fri, Mar 13th)
On Wednesday, a phishing message made its way into our handler inbox that contained a fairly typical low-quality lure, but turned out to be quite interesting in the end nonetheless. That is because the accompanying credential stealing web page was dynamically constructed using React and used a legitimate e-mail service for credential collection. But before…
AI, Global Security News, Network Security
Red Access firewall-native SSE adds GenAI security and browser protection to existing firewalls
Red Access has announced firewall-native SSE, an agentless cloud layer that instantly upgrades any existing firewall with Security Service Edge (SSE), GenAI security, and browser-agnostic protection. Deployed directly on top of existing architecture, the firewall-native SSE eliminates the need for rip-and-replace projects, accelerating deployment while reducing operational overhead without compromising user experience. “Secure enterprise browsing…
AI, Cybersecurity, Exploits, Global Security News, Government & Policy, Network Security, Risk Management
The cyber perimeter was never dead. We just abandoned it.
Industry has comforted itself with the idea that the perimeter is dead. It is not. What happened is far worse. We ignored the edge, let unsupported hardware decay in place, and effectively donated our perimeter to adversaries who were more than willing to accept it. The FBI’s Winter SHIELD effort is the operational side of…