A vulnerability in an AI automation framework could allow attackers to take complete control of systems running the software. Security researchers have identified a command injection flaw in the ModelScope MS-Agent framework that could enable remote code execution through crafted prompt input, exposing organizations that deploy AI agents with operating system access. “The real issue…
Category: AI
AI, Global Security News
Amperity appoints Bridget Perry as Chief Marketing Officer to accelerate AI-driven enterprise growth
Amperity today announced the appointment of Bridget Perry as Chief Marketing Officer. Perry brings more than two decades of experience scaling high-growth B2B SaaS companies and leading marketing organisations through major technology shifts, including the transition to cloud and product-led growth. Most recently, Perry served as CMO at Later, where she unified global marketing following a…
AI, Global Security News
Hacker mass-mails HungerRush extortion emails to restaurant patrons
Customers of restaurants using the HungerRush point-of-sale (POS) platform say they received emails from a threat actor attempting to extort the company, warning that restaurant and customer data could be exposed if HungerRush fails to respond. […]
AI, Global Security News
Authorities from 14 countries shut down major cybercrime forum LeakBase
Authorities from 14 countries shut down LeakBase, seized its domains and arrested multiple people allegedly involved in the cybercrime marketplace for stolen data and hacking tools, the Justice Department said Wednesday. LeakBase had more than 142,000 members, ranking it among the world’s largest forums for cybercriminals. The site, which was available on the open web,…
AI, Global Security News
Apple’s new $599 MacBook Neo is a nightmare for Windows OEMs
Apple’s big week of Mac, iPhone, and iPad introductions continued Wednesday with the launch of a brand-new $599 Apple laptop. The speculation that I think began with Ming-Chi Kuo last year was correct: the MacBook Neo is a 13-in. Mac laptop powered by an A18 Pro chip. It’s the very first Mac with a mobile processor, a…
AI, Cybersecurity, Global Security News
149 Hacktivist DDoS Attacks Hit 110 Organizations in 16 Countries After Middle East Conflict
Cybersecurity researchers have warned of a surge in retaliatory hacktivist activity following the U.S.-Israel coordinated military campaign against Iran, codenamed Epic Fury and Roaring Lion. “The hacktivist threat in the Middle East is highly lopsided, with two groups, Keymous+ and DieNet, driving nearly 70% of all attack activity between February 28 and March 2,” Radware…
AI, Global Security News
Enhanced access denied error messages with policy ARNs
To help you troubleshoot access denied errors, we recently added the Amazon Resource Name (ARN) of the denying policy to access denied error messages. This builds on our 2021 enhancement that added the type of the policy denying the access to access denied error messages. The ARN of the denying policy is only provided in…
AI, Global Security News
Apple Uses Low Prices to Attack Rivals During Memory-Chip Crunch
Leveraging its supply-chain might, the iPhone giant is making a play for more share in cheaper phone and laptop categories.
AI, Compliance, Global Security News, Venture
MY TAKE: ChatGPT is turning into Microsoft Office — and power users are paying the price
Something has been shifting inside the tools millions of us use every day, and it’s worth naming out loud. Related: AI is becoming a daily routine Over the past several months I’ve watched ChatGPT change. Not in some abstract, version-number way. In the way it feels when you’re actually working with it — trying to…
AI, Global Security News
OpenAI’s Former Research Chief Aims to Automate Manufacturing With AI
Bob McGrew is raising $70 million to fund a startup making software platform to help run autonomous factories.
AI, Exploits, Global Security News, malware, Network Security, Risk Management
Attackers are using your network against you, according to Cloudflare
Cloudflare’s inaugural threat intelligence report identifies a series of weaknesses in technology that attackers have abused and industrialized into professional “attack factories,” leaving most organizations unprepared to respond. Attackers are turning the very services victims deploy and pay for into tools for launching large-scale attacks. Researchers say the barrier to entry has vanished, as identities…
AI, Global Security News
Ransomware Breach at University of Hawaii Cancer Center Affects 1.2M People
The University of Hawaii Cancer Centre has confirmed a massive ransomware attack affecting 1.24 million people. Sensitive data, including Social Security numbers and historical voter records dating back to 1993, was compromised.
AI, Global Security News
LastPass warns of spoofed alerts aimed at stealing master passwords
LastPass warns of a phishing campaign using fake security alerts about unauthorized access or password changes to steal users’ master passwords. LastPass has warned users about a new phishing campaign using fake security alerts that claim unauthorized access or master password changes. The emails, which spoof LastPass’s display name, attempt to trick recipients into revealing…
AI, Global Security News
How a Brute Force Attack Unmasked a Ransomware Infrastructure Network
A routine RDP brute-force alert led to unusual credential hunting and a geo-distributed VPN-linked infrastructure. Huntress Labs explains how one compromised login unraveled a suspected ransomware-as-a-service ecosystem tied to initial access brokers. […]
AI, Apps, Global Security News
Digital.ai expands post-build protection for Android and iOS applications
Software security has reached an inflection point as AI development tools increase the volume and velocity of software releases, while AI is also powering the next generation of threat actors driving attack volume and sophistication to new heights. For security teams, this is not just acceleration – it is multiplication: more apps, more releases, and…
AI, Cybersecurity, Exploits, Global Security News, malware, Risk Management
CVE-2026-21385: Google Patches Qualcomm Zero-Day Exploited in Targeted Android Attacks
Steady cadence of Android zero-days marked as exploited in the wild makes its path to 2026. Following CVE-2025-48633 and CVE-2025-48572, two Android Framework bugs Google flagged for active exploitation, defenders keep seeing the same familiar pattern. Mobile-chain vulnerabilities can move fast from limited attacks to real enterprise risk when patching lags. In March 2026, that…
AI, Global Security News, Network Security, Risk Management
Tufin’s AI-powered tools simplify network security operations
Tufin announced its latest AI-powered innovations, enabling customers to utilize its Unified Control Plane to accelerate issue resolution, reduce operational friction, and limit risk – even as network complexity continues to grow. Security teams face pressure to move faster while maintaining a secure network environment. The complexity of the network makes it harder and harder…
AI, Global Security News, malware
Multi-Stage “BadPaw” Malware Campaign Targets Ukraine
Malware campaign uses Ukrainian email service for credibility, deploying “BadPaw” to execute attacks
AI, Global Security News, Risk Management
Webinar: The True State of Security 2026
AI has become the most popular scapegoat in security. While the risk is real, the obsession is costly. Most security failures don’t start with AI. They start with people, access, and security workflows that don’t scale. This webinar aims to reframe the conversation and show why the imbalance is the real threat to modern organizations.…
AI, Exploits, Global Security News
Over 1,200 IceWarp servers still vulnerable to unauthenticated RCE flaw (CVE-2025-14500)
A critical RCE vulnerability (CVE-2025-14500) in IceWarp, an EU-made business communication and collaboration platform, may be exploited by attackers to gain unauthorized access to exposed unpatched servers. According to the Shadowserver Foundation, there are currently over 1,200 internet-facing instances that have yet to receive a fix, and the organization is sending out alerts to the…
AI, Global Security News
OpenAI Updates ChatGPT with GPT-5.3 Instant Model
OpenAI has released GPT-5.3 Instant, a new version of the model that powers much of the day-to-day ChatGPT experience. The focus this time is something more practical than just reasoning benchmarks; it’s focused on improving reliability, response speed, and conversational quality. OpenAI promises a 26 percent reduction in hallucinations According to OpenAI, GPT-5.3 Instant reduces…
AI, Apps, Cybersecurity, Endpoint, Global Security News, Government & Policy, malware, Network Security, Risk Management
Iranian cyberattacks fail to materialize but threat remains acute
Five days into US and Israel’s war with Iran, the worst predictions for cyber-retaliation have yet to materialize. But Iran has built one of the world’s most active cyber operations, which means this is likely a temporary reprieve, experts warn. At the weekend, both the UK National Cyber Security Centre (NCSC) and the Canadian Centre…
AI, Exploits, Global Security News
Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13–17.2.1
Google said it identified a “new and powerful” exploit kit dubbed Coruna (aka CryptoWaters) targeting Apple iPhone models running iOS versions between 13.0 and 17.2.1. The exploit kit featured five full iOS exploit chains and a total of 23 exploits, Google Threat Intelligence Group (GTIG) said. It’s not effective against the latest version of iOS.…
AI, Apps, Cybersecurity, Endpoint, Global Security News, Government & Policy, malware, Network Security, Risk Management
Iranian cyberattacks fail to materialize but threat remains acute
Five days into US and Israel’s war with Iran, the worst predictions for cyber-retaliation have yet to materialize. But Iran has built one of the world’s most active cyber operations, which means this is likely a temporary reprieve, experts warn. At the weekend, both the UK National Cyber Security Centre (NCSC) and the Canadian Centre…
AI, Global Security News
Gemini Said They Could Only Be Together If He Killed Himself. Soon, He Was Dead.
A new lawsuit alleges Google’s chatbot sent a Florida man on missions to find an android body it could inhabit. When that failed, it set a suicide countdown clock for him.
AI, Apps, Global Security News, Risk Management
Cork Cyber Unveils Software Installer Scripts
At ThreatLocker Zero Trust World, Cork Cyber announced the launch of Software Installer Scripts within the Cork Vantage Platform, a new capability that enables MSPs to generate dynamic installer scripts for vulnerable and outdated software across Windows environments. Aligning operational security with financial continuity According to Cork Cyber, the release addresses the longstanding problem of…
AI, Apps, Global Security News
Nasuni Acquires Resilio to Accelerate Edge File Access & AI
Nasuni has acquired Resilio to strengthen high-speed file synchronization and edge acceleration capabilities within its cloud-native file services platform. The Boston-based unstructured data management vendor announced March 4 that the deal brings Resilio’s file synchronization and caching technology into the Nasuni File Data Platform. The combined offering is designed to improve end-user access to shared…
AI, Cybersecurity, Data Breaches, Global Security News, Network Security
MSPs Turn to AI Ops to Scale Securely in 2026
AI has shifted from experimental add-on to operational backbone for managed service providers. As service complexity rises, ransomware targets identity and backup layers, and margins tighten, MSPs are embedding AI directly into security, service desk, and backup platforms to automate detection, accelerate response times, and preserve profitability. James Griffin, CEO of CyberSentriq, shares his thoughts…
AI, Global Security News
From LinkedIn to tailored attack in 30 minutes
GUEST OPINION: How AI accelerates target profiling for cybercrime Key takeaways: AI has turned open-source intelligence (OSINT) from a manual effort into an automated pipeline, dramatically lowering the time, cost, and skills required to build target profiles at scale. LinkedIn content (posts, images, and metadata) now functions as machine-readable intelligence that can be enriched, ranked, and operationalised…
AI, Apps, Compliance, Endpoint, Europe, Global Security News, Government & Policy, malware, Risk Management
Google Workspace vs. Microsoft 365: What’s the best office suite for business?
Once upon a time, Microsoft Office ruled the business world. By the late ’90s and early 2000s, Microsoft’s office suite had brushed aside rivals such as WordPerfect Office and Lotus SmartSuite, and there was no competition on the horizon. Then in 2006 Google came along with Google Docs & Spreadsheets, a collaborative online word processing and…
AI, Global Security News
Altis appoints Luke Best to lead South Australia growth as data and AI demand surges
COMPANY ANNOUNCEMENT: Australian-owned expert data consultancy Altis Consulting has expanded into South Australia, responding to strong and growing demand for modern data and AI capabilities across the state.
AI, Global Security News
A Tiny Silicon Valley Startup Envisions Computing Beyond the Semiconductor
A breakthrough in superconductor manufacturing could transform the economics of AI, Snowcap Compute says.
AI, Global Security News, Network Security, privacy
Car Tyre Sensors Can Be Used to Track Drivers Without Their Knowledge
New research from IMDEA Networks reveals how unencrypted signals from tyre pressure sensors in brands like Toyota and Mercedes can be used for covert vehicle tracking. Learn how these low-cost systems can map out your daily routines and why current regulations fail to protect driver privacy.
AI, china, Europe, Exploits, Global Security News, Government & Policy, Network Security
From phishing to Google Drive C2: Silver Dragon expands APT41 playbook
APT group Silver Dragon, linked to APT41, targets governments via server exploits and phishing, using Cobalt Strike and Google Drive for C2. Check Point researchers have identified Silver Dragon, an APT group tied to the China-linked group APT41, targeting government entities in Europe and Southeast Asia since mid-2024. The group gains initial access by exploiting…
AI, Apps, Compliance, Global Security News
Radware Announces Another DDoS Industry First – Encrypted Attack Blocking Without SSL Decryption
COMPANY NEWS: Radware (NASDAQ: RDWR), a global leader in application security and delivery solutions for multi-cloud environments, today announced the availability of its Web DDoS Protection for Encrypted Traffic as a cloud-based service that does not require SSL certificate sharing or traffic decryption. With this release, Radware believes it is the only security provider to…
AI, Global Security News
New RFP Template for AI Usage Control and AI Governance
As AI becomes the central engine for enterprise productivity, security leaders are finally getting the green light — and the budget — to secure it. But there’s a quiet crisis unfolding in the boardroom: many organizations know they need “AI Governance,” but they have no idea what they are actually looking for. The CISO’s Dilemma:…
AI, Global Security News
Celonis enabling global enterprises to save $10 billion building composable AI Solutions
Celonis announced today that its customers have reached a significant milestone – realising savings of $US10 billion by optimising their operations through Process Intelligence.
AI, Exploits, Global Security News
Calls for Global Digital Estate Standard as Posthumous Deepfake Fraud Risk Grows
The OpenID Foundation warns that fragmented policies on posthumous digital accounts could open the door for fraudsters to exploit AI deepfakes
AI, Global Security News, malware
3 Android theft protection additions you should absolutely activate
BRRRRRRRRRREAKING NEWS, y’all: Despite what the internet’s many misleading headlines may lead you to believe, Android security (gasp!) isn’t actually all that scary. You know that by now, right? Any reasonably recent Android device has layers upon layers of built-in protection. You’ve got mountains of Android security settings standing by and waiting to protect you…
AI, Global Security News
Nvidia Swears Off an Earnings Crutch, Putting Pressure on Other Tech Companies
The AI chip giant has taken a positive step in how it reports stock-based compensation.
AI, Exploits, Global Security News
The vulnerability that turns your AI agent against you
Zenity Labs disclosed PleaseFix, a family of critical vulnerabilities affecting agentic browsers, including Perplexity Comet, that allow attackers to hijack AI agents, access local files, and steal credentials within authenticated user sessions. The vulnerabilities can be triggered through malicious content embedded in routine workflows, enabling unauthorized actions without user awareness. The disclosure includes PerplexedBrowser, a…
AI, Global Security News
Protecting education: How MDR can tip the balance in favor of schools
The education sector is notoriously short on cash, but rich in assets for threat actors to target. How can managed detection and response (MDR) help learning institutions regain the initiative?
AI, Compliance, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
Major Cyber Attacks in February 2026: BQTLock, Thread-Hijack Phishing, and MFA Bypass Evolution
February 2026 brought a surge of sophisticated cyber threats targeting businesses across industries. ANY.RUN’s analysts exposed and explored several major cyber threats this month, providing early visibility into emerging malware families and evolving attack techniques. From new ransomware strains capable of encrypting entire environments in minutes, to fully undetected remote access trojans — the threat…
AI, Global Security News, malware
Want More XWorm?, (Wed, Mar 4th)
And another XWorm[1] wave in the wild! This malware family is not new and heavily spread but delivery techniques always evolve and deserve to be described to show you how threat actors can be imaginative! This time, we are facing another piece of multi-technology malware. Here is a quick overview: The Javascript is a classic obfuscated one: No need…
AI, china, Global Security News, Government & Policy, Network Security, Risk Management
Anthropic AI ultimatums and IP theft: The unspoken risk
Two recent high-profile events concerning Anthropic’s Claude AI underscore a little-discussed risk at the heart of the enterprise’s rush to capitalize on leading AI capabilities. The first incident involved a China-based extraction campaign against Anthropic’s intellectual property. The second was the Trump administration’s banning of Claude for federal use after the company resisted US demands…
AI, Global Security News
Google speeds up Chrome updates with new security-focused release cycle
The Chrome browser is moving to a two-week release cycle, a change intended to give developers and users faster access to new features, performance improvements and bug fixes. The new schedule begins with the stable release of Chrome 153 on September 8, 2026, followed by new beta and stable releases every two weeks. The change…
AI, APAC, Compliance, Cybersecurity, Exploits, Global Security News, Network Security, Risk Management
U.S. CISA adds Qualcomm and Broadcom VMware Aria Operations flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Qualcomm and Broadcom VMware Aria Operations flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Google Chromium CSS, Microsoft Windows, TeamT5 ThreatSonar Anti-Ransomware, and Zimbra flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: CVE-2026-22719 (CVSS…
AI, Apps, Global Security News, Risk Management
ArmorCode AI Exposure Management identifies, governs, and reduces shadow AI risk
ArmorCode has announced AI Exposure Management (AIEM), delivered on the ArmorCode Agentic AI Platform, as the newest solution in its unified exposure management suite. ArmorCode AIEM is a system of action that provides enterprises with comprehensive visibility and control over AI usage across heterogeneous environments while establishing ownership and enforceable governance. ArmorCode AIEM helps organizations…
AI, Cybersecurity, Data Breaches, Global Security News, privacy, Risk Management
Data breach at University of Hawaiʻi Cancer Center impacts 1.2 Million individuals
A ransomware attack on the University of Hawaiʻi Cancer Center exposed personal data of 1.2 million people. A 2025 ransomware attack targeting the University of Hawaiʻi Cancer Center compromised the personal information of about 1.2 million individuals. The attack hit the University of Hawaiʻi Cancer Center on August 31, 2025, impacting servers that support research…
AI, Cybersecurity, Europe, Exploits, Global Security News
APT41-Linked Silver Dragon Targets Governments Using Cobalt Strike and Google Drive C2
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) group dubbed Silver Dragon that has been linked to cyber attacks targeting entities in Europe and Southeast Asia since at least mid-2024. “Silver Dragon gains its initial access by exploiting public-facing internet servers and by delivering phishing emails that contain malicious attachments,” Check Point…
AI, Global Security News
Arkose Device ID uses AI to recognize devices across changing fingerprints
Arkose Labs has announced the latest release of Arkose Device ID, a solution within the new Arkose Titan platform. It layers AI-driven similarity analysis on top of exact-match identification, enabling recognition of the same device across evolving fingerprints while maintaining the accuracy enterprises require. Arkose Device ID delivers persistent device recognition that remains intact even…
AI, Global Security News, Risk Management
ImmuniWeb launches a Cyber Threat Intelligence service
ImmuniWeb Discovery has been enhanced with a dedicated Cyber Threat Intelligence (CTI) offering. In addition to detecting customer-specific incidents on the dark web and other locations across the internet, the new CTI capability enables customers to stay continuously informed about emerging trends in cybercrime, the regulatory landscape, and supply chain risks. In addition to strategic…
AI, Compliance, Data Breaches, Global Security News, privacy, Risk Management
How to know you’re a real-deal CSO — and whether that job opening truly seeks one
Recruiters of senior-level IT professionals often say that a truly skilled and experienced CSO is among the hardest of all IT roles to fill. The reason is due to the increased responsibility placed on these key employees, who are often part of the C-suite and may even report directly to the CEO. Unfortunately, this can…
AI, Global Security News
mquire: Open-source Linux memory forensics tool
Linux memory forensics has long depended on debug symbols tied to specific kernel versions. These symbols are not installed on production systems by default, and sourcing them from external repositories creates a recurring problem: repositories go stale, kernel builds diverge, and analysts working incident response often find no published symbols for the exact kernel they…
AI, Cybersecurity, Global Security News
Cybersecurity is now the price of admission for industrial AI
Industrial organizations are accelerating AI deployment across manufacturing, utilities, and transportation and running straight into a security problem. Cisco’s 2026 State of Industrial AI Report, based on responses from more than 1,000 decision-makers across 19 countries, finds that cybersecurity has become the single largest obstacle to AI adoption, outranking skills gaps, integration challenges, and budget…
AI, china, Cybersecurity, Data Breaches, Exploits, Global Security News, Government & Policy, Network Security, Risk Management, Russia
AI-powered attack kits go open source, and CyberStrikeAI may be just the beginning
AI is making it ever easier for bad actors to launch attacks, and a newly-identified open source platform, CyberStrikeAI, seems to be lowering the bar even further. The platform packages end-to-end attack automation into a single AI-native orchestration engine, and is linked to the threat actor behind the recent campaign that breached hundreds of Fortinet…
AI, china, Cybersecurity, Data Breaches, Exploits, Global Security News, Government & Policy, Network Security, Risk Management, Russia
AI-powered attack kits go open source, and CyberStrikeAI may be just the beginning
AI is making it ever easier for bad actors to launch attacks, and a newly-identified open source platform, CyberStrikeAI, seems to be lowering the bar even further. The platform packages end-to-end attack automation into a single AI-native orchestration engine, and is linked to the threat actor behind the recent campaign that breached hundreds of Fortinet…
AI, Global Security News
Europol, Microsoft, TrendAI™ and Collaborators Halt Tycoon 2FA Operations
Tycoon 2FA was dismantled this week by law enforcement and industry partners including TrendAI™. The phishing-as-a-service platform offered MFA bypass services using adversary-in-the-middle (AitM) proxying.
AI, Global Security News
Facebook is experiencing a global outage
Facebook is experiencing a global outage since 4:15 PM ET, with users reporting they cannot access their accounts. Facebook users worldwide report problems while attempting to access their accounts. The outage started around 4:15 PM ET. Upon attempting to access their account, users are presented the following message: “Account Temporarily Unavailable. Your account is currently unavailable due…
AI, Data Breaches, Global Security News, Network Security
Paint maker giant AkzoNobel confirms cyberattack on U.S. site
The multinational Dutch paint company AkzoNobel has confirmed to BleepingComputer that hackers breached the network of one of its U.S. sites. […]
AI, china, Cybersecurity, Exploits, Global Security News, Government & Policy, Russia
Possible U.S.-developed exploits linked to first known ‘mass’ iOS attack
An exploit kit that may have originated from a leaked U.S. government framework is behind what researchers are calling the first mass-scale attack on iOS, the operating system for Apple’s iPhones. Traces of the exploits, found in the work of Chinese cybercriminals, also have been spotted in Russian attacks on Ukraine and used by a…
AI, china, Exploits, Global Security News, Government & Policy, malware, Network Security, Risk Management, Russia
NCSC Warns UK Organisations to Prepare for Potential Iran-Linked Cyber Activity
Geopolitical conflict rarely stays confined to physical battlefields. Increasingly, it spills into the digital domain. The latest escalation of tensions in the Middle East has prompted the UK’s National Cyber Security Centre (NCSC) to issue a warning to organisations to review their cyber security posture and prepare for possible cyber activity linked to Iran. While…
AI, Global Security News
Microsoft: Hackers abuse OAuth error flows to spread malware
Hackers are abusing the legitimate OAuth redirection mechanism to bypass phishing protections in email and browsers to take users to malicious pages. […]
AI, Apps, Exploits, Global Security News, malware
Researchers discover suite of agentic AI browser vulnerabilities
Researchers have discovered multiple vulnerabilities that let attackers to quietly hijack agentic AI browsers. Researchers at Zenity Labs discovered these flaws, which affected multiple AI browsers, including Perplexity’s Comet. Before being patched, an attacker could exploit them via a legitimate calendar invite, using a prompt injection to force the AI browser to act against its…
AI, Global Security News
OpenAI CEO Sam Altman Defends Pentagon Work to Staff, Calls Backlash ‘Really Painful’
The startup’s deal to do classified work with the Defense Department drew criticism from staff and other AI researchers.
AI, Cybersecurity, Global Security News, Government & Policy
CISA CIO Robert Costello exits agency
The chief information officer at the Cybersecurity and Infrastructure Security Agency announced his departure Tuesday, ending his nearly five-year run at CISA. Robert Costello, an 18-year veteran of the Department of Homeland Security, posted about the move on LinkedIn. “Serving as CIO at CISA has been one of the greatest privileges of my career,” he…
AI, Exploits, Global Security News
Qualcomm Zero-Day Exploited in Targeted Android Attacks
The exploitation activity against CVE-2026-21385, a high-severity memory corruption flaw, could be tied to commercial spyware or nation-state threat groups.
AI, Compliance, Global Security News, Risk Management
2025 FINMA ISAE 3000 Type II attestation report available with 183 services in scope
Amazon Web Services (AWS) is pleased to announce the issuance of the Swiss Financial Market Supervisory Authority (FINMA) Type II attestation report with 183 services in scope. The Swiss Financial Market Supervisory Authority (FINMA) has published several requirements and guidelines about engaging with outsourced services for the regulated financial services customers in Switzerland. An independent…
AI, Compliance, Global Security News, Network Security
Alkira Launches Connect Partner Program
Alkira, a Network Infrastructure as a Service (NIaaS) leader, is launching the Alkira Connect Partner Program. Connecting GSI, CSP, MSP, and other partners to improved revenue streams The program is designed to mirror modern enterprise buying motions and delivers a framework to partners that allows them to build customer trust by solving complex problems faster,…
AI, Exploits, Global Security News
Coruna: Spy-grade iOS exploit kit powering financial crime
A powerful iOS exploit kit has circulated among multiple threat actors over the past year, moving from a commercial surveillance operation to state-linked espionage campaigns and, ultimately, ended into the hands of financially motivated hackers, according to new research from Google’s Threat Intelligence Group (GTIG). “The exploit kit, named ‘Coruna’ by its developers, contained five…
AI, Global Security News
Thrive Capital, A16Z to Lead Anduril Investment at $60 Billion Valuation
Palmer Luckey’s defense technology company builds AI-powered autonomous weapons.
AI, Cybersecurity, Data Breaches, Global Security News, Network Security, Russia
Ariomex, Iran-based crypto exchange, suffers data leak
Resecurity says Iran’s Ariomex crypto exchange suffered a data leak exposing user and transaction data from 2022 to 2025. Resecurity (USA) reports that Ariomex’s database, one of Iran’s cryptocurrency exchange platforms, suffered a data leak. The report published by the cybersecurity company presents the findings of a structured analysis of the leaked database, which contains…
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, Network Security, privacy, Risk Management
Alabama Sextortion Case Involved Hundreds of Victims
A 22-year-old Alabama man has pleaded guilty to federal charges after hijacking the social media accounts of hundreds of young women and extorting them with stolen intimate images. Between 2022 and 2025, Jamarcus Mosley used impersonation tactics to seize control of victims’ Snapchat and Instagram accounts, then threatened to publish private photos unless they complied…
AI, Global Security News
How Long Can Anthropic Play Defense?
Plus, Nvidia wants to extend its AI chip reach.
AI, Global Security News
Speakeasies to Shadow AI: Banning AI Browsers Will Fail
Lessons from history highlight why AI-enabled browsers require controlled enablement.
AI, Apps, Global Security News, Government & Policy
iTWire TV: AI With Accountability – How Smart Communications Is Proving That Regulated Industries Don’t Have to Choose Between Innovation and Trust
There’s an old IBM slide from the 1970s that carries a deceptively simple message: A computer can never be held accountable. Therefore, a computer must never make a management decision. Half a century later, as AI agents draft insurance claims, process government applications, and orchestrate healthcare communications at scale, that maxim hasn’t become obsolete – it’s become…
AI, Compliance, Global Security News, Risk Management
2025 PiTuKri ISAE 3000 Type II attestation report available with 183 services in scope
Amazon Web Services (AWS) is pleased to announce the issuance of the Criteria to Assess the Information Security of Cloud Services (PiTuKri) Type II attestation report with 183 services in scope. The Finnish Transport and Communications Agency (Traficom) Cyber Security Centre published PiTuKri, which consists of 52 criteria that provide guidance across 11 domains for…
AI, Global Security News
Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations
Threat hunters have called attention to a new campaign as part of which bad actors masqueraded as fake IT support to deliver the Havoc command-and-control (C2) framework as a precursor to data exfiltration or ransomware attack. The intrusions, identified by Huntress last month across five partner organizations, involved the threat actors using email spam as…
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, Government & Policy, Network Security, Politics, Risk Management
UK Warns of Heightened Iranian Cyber Risk as Middle East Conflict Intensifies
The United Kingdom’s National Cyber Security Centre (NCSC) is urging British organizations to brace for potential Iranian-linked cyber activity as tensions escalate in the Middle East. While officials say there is no confirmed spike in direct attacks against the UK, they caution that the situation could shift rapidly. “There is almost certainly a heightened risk…
AI, Global Security News
The Evangelist Teaching a 220-Year-Old Toothpaste Maker to Embrace AI
Colgate-Palmolive turns to Iraklis “Kli” Pappas to drive employees toward using AI for more than just polishing emails.
AI, Apps, Global Security News, Government & Policy
AI With Accountability: How Smart Communications Is Proving That Regulated Industries Don’t Have to Choose Between Innovation and Trust
There’s an old IBM slide from the 1970s that carries a deceptively simple message: A computer can never be held accountable. Therefore, a computer must never make a management decision. Half a century later, as AI agents draft insurance claims, process government applications, and orchestrate healthcare communications at scale, that maxim hasn’t become obsolete – it’s become…
AI, Global Security News
Apple unveils its next-gen M5 family of Mac laptops
Turning to the Mac, Apple on Tuesday updated the world’s most popular laptop, introducing the MacBook Air with an M5 chip. It also unveiled super-powered M5 Pro and M5 Max chips inside the MacBook Pro, a new Studio Display and all-new Studio Display XDR. The latest product introductions follow Monday’s announcement of a new M4-powered iPad…
AI, Apps, Compliance, Data Breaches, Endpoint, Exploits, Global Security News, Network Security, Risk Management
$5M Microsoft Activation Key Fraud Ends in Prison Term
A Florida woman has been sentenced to 22 months in federal prison for running a years-long scheme that trafficked thousands of illicit Microsoft software activation keys. Heidi Richards, who operated Trinity Software Distribution, was also ordered to pay a $50,000 fine after pleading guilty to charges tied to the resale of Microsoft Certificate of Authenticity…
AI, Apps, Cloud Security, Data Breaches, Exploits, Global Security News, Network Security, Risk Management
Identity Security Blind Spots Fuel Modern Attacks
Many organizations believe they have identity security under control. New data from Permiso’s State of Identity Security Report suggests that confidence is increasingly misplaced — right as identity becomes the dominant attack vector in cloud environments. “92% percent of organizations have AI agents in production accessing sensitive data, and those agents are creating identities without…
AI, Exploits, Global Security News
Israel: RedAlert Spyware Campaign Exploits Wartime Panic With Trojanized App
Espionage campaign exploits Israel-Iran conflict, distributing a trojanized Red Alert app via SMS
AI, Global Security News
iTWire TV: Ninety Five Percent of AI Projects Are Failing – and Broken Search Is the Hidden Culprit
GUEST INTERVIEW: Enterprise AI’s dirty secret isn’t bad models. It’s that most organisations are building on data foundations that were never designed for the age of intelligence.
AI, Global Security News, Government & Policy, malware
Threat actors weaponize OAuth redirection logic to deliver malware
An ongoing phishing campaign is abusing the OAuth authentication redirection mechanism to avoid triggering conventional email and browser defenses, Microsoft researchers have revealed. The attackers are targeting government and public-sector organizations, and redirecting unsuspecting users from trusted login pages to their own infrastructure, to serve malware or capture login credentials. The attack, from the victim’s…
AI, Global Security News
Ninety Five Percent of AI Projects Are Failing – and Broken Search Is the Hidden Culprit
Enterprise AI’s dirty secret isn’t bad models. It’s that most organisations are building on data foundations that were never designed for the age of intelligence.
AI, Apps, Data Breaches, Exploits, Global Security News
Oracle EBS 2025 campaign impacts Madison Square Garden, sensitive data leaked
Madison Square Garden confirmed a data breach tied to the 2025 Oracle E-Business Suite hacking campaign. Madison Square Garden (MSG) has confirmed it was affected by a data breach linked to the 2025 cybercrime campaign targeting Oracle’s E-Business Suite (EBS) customers. Madison Square Garden (MSG) is a world-famous multi-purpose indoor arena located in New York…
AI, Data Breaches, Global Security News, Network Security
Cloudflare tracked 230 billion daily threats and here is what it found
Cloudflare’s network blocks over 230 billion threats per day. The volume indicates how routine and automated the attack cycle has become, and the patterns behind that volume point to a shift in how breaches begin and progress. Cloudflare’s threat research unit, Cloudforce One, published its inaugural cyber threat report 2026, covering activity observed through 2025…
AI, Global Security News
AI and Deepfakes Supercharge Sophisticated Cyber-Attacks, Says Cloudflare
Cloudflare Threat Report warns that AI tools enable attackers who lacked required skills to generate effective attacks rapidly and at scale
AI, Global Security News
Compromised Site Management Panels are a Hot Item in Cybercrime Markets
Compromised cPanel credentials are being sold in bulk across underground channels as plug-and-play phishing and scam infrastructure. Flare explains how analyzing 200,000 underground posts reveals a commoditized market for hacked site management panels. […]
AI, APAC, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, Risk Management, Venture
Anthropic won’t kill cyber, but it will kill some companies
Over the past several weeks, social media has been exploding with predictions that “cyber is dead”. It doesn’t take much insight to jump on that bandwagon, as Anthropic’s announcement of Claude Code Security indeed sent the cybersecurity public market into turmoil, with some companies losing as much as 20% of their market cap. Contrary to…
AI, Compliance, Data Breaches, Global Security News
Josys centralizes identity data to replace manual IT oversight with automated governance
Josys has transitioned into an autonomous identity governance platform, expanding beyond traditional SaaS management. The enhanced platform empowers IT leaders and managed service providers (MSPs) to scale governance and compliance efforts by centralizing identity data within a single, AI-driven system. With Verizon reporting that 80% of hacking breaches stem from compromised credentials, identity is the…
AI, Europe, Global Security News, Network Security
$100 radio equipment can track cars through their tire sensors
When people consider what might track their movements, they think of smartphone apps, GPS services, or roadside cameras. The tires of a new car rarely enter that equation. Researchers at IMDEA Networks Institute, together with European partners, found that Tire Pressure Monitoring System (TPMS) sensors inside each wheel broadcast unencrypted wireless signals containing persistent identifiers.…
AI, Global Security News
RecordPoint MCP Server standardizes and secures AI access to compliant data
RecordPoint has unveiled its model context protocol (MCP) server, giving enterprises a secure, standardized way to expose governed data to external AI agents and platforms. The RecordPoint MCP Server allows any AI system, copilot, agent, or custom LLM app to safely access governed, compliant data from the RecordPoint platform without custom integrations or elevated permissions.…
AI, Global Security News, Risk Management
ProcessUnity Risk Index delivers controls-driven vendor risk scoring for TPRM
ProcessUnity has introduced ProcessUnity Risk Index, a risk rating built specifically for third-party risk management programs, combining proprietary control intelligence with external threat and vulnerability data. ProcessUnity Risk Index rates vendors on a 100-point scale to drive faster, more confident risk prioritization. Built for how TPRM teams actually work, ProcessUnity Risk Index blends inside-out, vendor-attested…
AI, Global Security News
Open-Source CyberStrikeAI Deployed in AI-Driven FortiGate Attacks Across 55 Countries
The threat actor behind the recently disclosed artificial intelligence (AI)-assisted campaign targeting Fortinet FortiGate appliances leveraged an open-source, AI-native security testing platform called CyberStrikeAI to execute the attacks. The new findings come from Team Cymru, which detected its use following an analysis of the IP address (“212.11.64[.]250”) that was used by the suspected
AI, Global Security News, Network Security
Enigma AI enables internal trust governance to asset-to-asset communications
Enigma Networks has announced the general availability of its Internal Trust Governance platform, Enigma AI, which continuously determines and validates which communications are necessary and safe across enterprise networks. Just as identity and access management (IAM) governs trust for users, Enigma AI governs trust between internal systems and assets, introducing a new control plane for…
AI, Global Security News
Hackers Abuse .arpa Top-Level Domain to Host Phishing Scams
Hackers abuse the .arpa Top-Level Domain to host phishing scams, using IPv6 tunnels, reverse DNS tricks, and shadow domains to bypass security checks.