In this Help Net Security video, Garfield Jones, SVP Global Strategy and Research, QuSecure, lays out what CISOs should do over the next 24 months. A recent Google paper moved the expected arrival of a cryptographically relevant quantum computer from 2035 to 2029, leaving organizations about two and a half years to prepare. Such a…
Tag: RESEARCH
Global Security News
Ransomware leak posts show weekday peak, October spikes
The data analyzed by the Ransomnews Research Team indicates that ransomware operations largely follow a business week, with significantly fewer posts on Sundays compared to Mondays and Tuesdays.
AI, Global Security News
Infosecurity Europe: OWASP Forms New Agentic Research Council
OWASP’s new Agentic Research Council will aim to connect academic work to operational realities on agentic AI security
AI, Europe, Exploits, Global Security News, malware, Network Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 99
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Ghost CMS Mass Compromised via CVE-2026-26980, Now Fueling ClickFix Attacks TrapDoor Crypto Stealer Supply Chain Attack Hits 34 Packages and Hundreds of Versions Across npm, PyPI, and Crates.io RemotePE: The Lazarus RAT that lives…
AI, APAC, Compliance, Cybersecurity, Global Security News, Government & Policy, Risk Management
AI Growth Exposes Gaps in Governance and Readiness
Artificial intelligence (AI) adoption continues to grow across industries, but new research from Veeam suggests many organizations are still working through the governance, security, and operational challenges associated with deploying AI at scale. The study, which surveyed 300 technology and business leaders across financial services, healthcare, government, manufacturing, and technology sectors, found that 95% of…
AI, Apps, Global Security News
AI hiring monoculture is delivering racial bias at scale
A research project examining AI-driven recruitment hires across the US has revealed a systemic racial bias. Researchers from Stanford University found a startling pattern of racial disparities when looking at the interview offers resulting from 4 million job applications submitted to 156 employers. The situation is aggravated by the “monoculture” in AI hiring software: More…
AI, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, malware, Network Security, Risk Management
AI Software Supply Chain Threats Escalate in 2026
Artificial intelligence is rapidly transforming software development, but new research from JFrog suggests security teams are struggling to keep pace with the risks that come with it. The Software Supply Chain Security State of the Union 2026 report found that AI-driven development is accelerating malicious package activity, insecure AI tooling, and software supply chain governance…
AI, Global Security News
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
Microsoft has come out strongly in favor of Coordinated Vulnerability Disclosure (CVD), urging the research community to share their findings and give affected vendors an opportunity to better understand the impact and address them before they are publicly disclosed. The development comes after a researcher named Chaotic Eclipse (aka Nightmare-Eclipse) disclosed details of multiple zero-day
Global Security News
ESET APT Activity Report Q4 2025–Q1 2026
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026
AI, Global Security News
Mass database extortion causes significant damage despite low payment rates
The Ransomnews Research Team’s five-year study, spanning from May 2021 to May 2026, analyzed over 65,000 exposed databases, finding that 46.3% contained ransom or wipe notes.
AI, Global Security News
Cybercriminals increasingly use AI for deepfake-based KYC bypass, report finds
New research from Flashpoint highlights a significant trend where threat actors are not focused on developing novel AI tools but rather on refining existing ones.
AI, Global Security News
Smart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC Testnet
TrendAI™ Research analyzed an intrusion where threat actors used the EtherHiding technique to route ClearFake payload delivery through smart contracts on the BNB Smart Chain testnet. The attack chain ended with two simultaneously deployed stealers, SectopRAT and ACRStealer alongside an on-chain execution tracker that confirmed each victim compromise in real time.
AI, Apps, Global Security News
OpenHack: Open-source AI-powered vulnerability research
Source-guided vulnerability research increasingly leans on coding harnesses such as Claude Code, Codex, and Cursor to drive agent-based reviews of application code. A new MIT-licensed project from the Dutch security firm Hadrian, called OpenHack, packages that approach into a file-based workspace that any of those harnesses can run. OpenHack is a set of agents and…
AI, Global Security News
How AI Talks People Out of Conspiracy Theories—and What We Can Learn From That
Research shows that the key is to clearly explain relevant facts. That isn’t always easy to do.
AI, Global Security News, malware, Network Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 98
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Popular node-ipc npm Package Infected with Credential Stealer New Actors Deploy Shai-Hulud Clones: TeamPCP Copycats Are Here Active Supply Chain Attack Compromises @antv Packages on npm actions-cool/issues-helper GitHub Action Compromised: All Tags Point to…
AI, Global Security News
Cisco warns of AI inaccuracies in security incident reports
Cisco’s research highlights several key issues with AI-generated reports, including inconsistency and standardization challenges due to LLMs using different data for each query and producing slightly different outcomes even with the same data.
Global Security News
Organizations knowingly ship vulnerable code amid shrinking exploit windows
New research from Checkmarx reveals that 75% of organizations admit to frequently or sometimes deploying code they are aware is vulnerable.
AI, APAC, Apps, Exploits, Global Security News, Network Security, Risk Management
The AI that cracked Apple Silicon is only the beginning
A security research team just used Claude Mythos to identify the first known exploit in Apple’s M5 chip. They needed physical access to the device to use it, the vulnerability has since been patched, and I don’t think it should be seen as a huge threat. But it is a stark warning that in this AI…
AI, Apps, Compliance, Global Security News, privacy, Risk Management
TrustedTech: Executives Drive Shadow AI Risk in Enterprises
TrustedTech has released new research indicating that senior leaders are among the biggest sources of shadow AI risk within organizations, with executives using unapproved AI tools at significantly higher rates than lower-level employees. The Irvine, California-based Microsoft cloud solutions and IT modernization provider said its global and U.S. data points to a growing gap between…
AI, Global Security News
AI is drowning software maintainers in junk security reports
AI-assisted vulnerability research has exploded, unleashing a firehose of low-quality reports on overworked software maintainers who are wasting hours sifting through noise instead of fixing real problems. Linus Torvalds, the Linux kernel’s creator, says the flood has made the project’s security mailing list “almost entirely unmanageable, with enormous duplication due to different people finding the…
Global Security News
Security Researchers Find 47 Zero-Days at Pwn2Own Berlin
The research community was awarded $1.3m as it found dozens of novel vulnerabilities at Pwn2Own Berlin
AI, Exploits, Global Security News, malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 97
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter JDownloader site hacked to replace installers with Python RAT malware New TrickMo Variant: Device Take Over malware targeting Banking, Fintech, Wallet & Auth apps Threat Actor Mr_Rot13 Actively Exploits CVE-2026-41940 for Backdoor Deployment Operation…
AI, Compliance, Global Security News, Risk Management
Workday: AI is Faster, but Making Work Busier
Workday recently released new research that found that while employees are using AI in their work, the technology’s impact is limited, as it has made them busier. Workers report more time connecting systems as AI adoption expands According to the report, titled “The Copy/Paste Economy: Why Task-Oriented AI is Failing the Enterprise,” 8 in 10…
AI, Global Security News
TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages
Research reveals that TeamPCP hijacked OIDC tokens to poison hundreds of TanStack, Mistral AI, and UiPath packages with the self-propagating Mini Shai-Hulud worm.
AI, Global Security News
Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential Theft
Our research examines the April 22 Checkmarx KICS and April 24 elementary-data incidents as part of a broader TeamPCP supply chain campaign. Across both cases, the actor abused trusted CI/CD and release workflows to steal credentials at scale.
AI, Apps, Compliance, Data Breaches, Global Security News, Network Security, Risk Management
Banks Face a Growing AI Risk at the Database Layer
Financial institutions are rapidly deploying AI, but new research suggests many banks may be securing the wrong layer of the stack. Liquibase researchers warn that while organizations focus heavily on AI models and APIs, the database layer may be one of the most exposed parts of modern financial infrastructure. “Governance for agents has to move…
AI, Apps, Compliance, Cybersecurity, Europe, Global Security News, Network Security
Enabling AI sovereignty on AWS
Cloud and AI are transforming industries and societies at unprecedented speed, from accelerating research and enhancing customer experiences to optimizing business processes and enriching public services. At Amazon Web Services (AWS), we believe that for the cloud and AI to reach their full potential, customers need control over their data and choices for how and…
AI, Data Breaches, Endpoint, Global Security News, Network Security, Risk Management
Claude Code MCP Attack Enables Persistent Token Theft
AI coding assistants are becoming deeply integrated with enterprise SaaS platforms, but new research shows those connections may introduce hard-to-detect credential theft risks. Researchers demonstrated a MitM attack targeting Anthropic’s Claude Code that abuses MCP integrations to steal OAuth tokens and maintain persistent access to connected SaaS platforms and APIs. “AI agents used for code…
AI, Global Security News, Government & Policy
Vibe Hacking: Two AI-Augmented Campaigns Target Government and Financial Sectors in Latin America
TrendAI™ Research has identified two emerging threat campaigns—SHADOW-AETHER-040 and SHADOW-AETHER-064—that use agentic AI to drive intrusion operations against government and financial organizations in Latin America, marking these among the first cases we have observed of AI agents executing attacks from initial access to data exfiltration.
AI, Global Security News, malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 96
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter CloudZ RAT potentially steals OTP messages using Pheno plugin Backdoored PyTorch Lightning package drops credential stealer A rigged game: ScarCruft compromises gaming platform in a supply-chain attack Muddying the Tracks: The State-Sponsored Shadow Behind…
AI, Global Security News
Securonix launches AI threat research agent and ThreatWatch validation tool
Securonix announced the Securonix Threat Research Agent and ThreatWatch for ThreatQ, expanding how security teams research threats, validate exposure, and turn intelligence into documented action. Built on the ThreatQ platform and connected to Securonix security operations workflows, the new capabilities help teams generate role-specific intelligence, validate emerging threats against historical telemetry, and deliver explainable findings…
AI, Global Security News
Cleartext Passwords in MS Edge? In 2026?, (Mon, May 4th)
Yup, that is for real. For me, this started with a post in X at hxxps://x.com/intcyberdigest/status/2051406295828250963?s=61 , which highlighted research by @L1v1ng0ffTh3L4N that found exactly this issue. Edge stores all of your browser passwords in clear text, even if you haven’t used them in this session, y’know, just in case. I figured, it couldn’t be that easy, right? …
AI, Global Security News, malware
Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities
TrendAI™ Research breaks down Quasar Linux (QLNX), a previously undocumented sophisticated Linux RAT with low detection rates. In this blog, we examine a full-featured Linux threat incorporating a rootkit, a PAM backdoor, credential harvesting, and more, revealing how this malware enables stealthy access, persistence, and potential supply-chain attacks.
AI, Global Security News, malware, Russia
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 95
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet 73 Open VSX Sleeper Extensions Linked to GlassWorm Show New Malware Activations An alarm clock you can’t ignore: How CapFix attacks…
AI, Cybersecurity, Global Security News, Risk Management
Security Hiring Strain Could Boost MSP Demand
A new IANS Research and Artico Search report shows cybersecurity employers are facing a retention problem that could create both hiring challenges and business opportunities for MSPs. Only 34% of cybersecurity professionals surveyed said they plan to stay with their current employer over the next year, while the rest are either undecided or actively considering…
AI, Global Security News
Friendlier chatbots can be less reliable, study says
New research from the Oxford Internet Institute indicates that AI chatbots trained to be extra warm, friendly, and empathetic can also become less reliable, according to the BBC. The researchers analyzed more than 400,000 responses from five different AI models from Meta, Mistral AI, Alibaba, and OpenAI. The results showed that the “kinder” versions more…
AI, Global Security News
EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades
Intro A sophisticated, high-resilience malicious campaign was identified by Atos Threat Research Center (TRC) in March 2026. This operation specifically targets the high-privilege professional accounts of enterprise administrators, DevOps engineers, and security analysts by impersonating administrative utilities they rely on for daily operations. By integrating Search Engine Order (SEO)
AI, Global Security News, Risk Management
Ping Identity Warns of Emerging Authorisation Risks as AI Agents Scale Across Enterprises
COMPANY NEWS: New KuppingerCole Analysts research, commissioned by Ping Identity, defines how enterprises can govern AI agents at runtime to close emerging authorization gaps
Global Security News
82 Chrome Extensions Found Selling User Data, 6.5 Million Users Affected
LayerX research finds 82 Chrome extensions collecting and selling user data, affecting at least 6.5 million users through disclosed but concerning practices.
AI, Apps, Compliance, Endpoint, Global Security News, privacy
Report: 60% of Enterprises Actively Deploying AI PCs
Building on previous IDC-commissioned AI PC research, AMD has debuted a new report displaying how enterprises are moving from evaluating AI PCs to active deployment. Nearly all enterprises are at least in the planning stage of AI PC adoption The report captures the growing momentum of AI PC adoption among organizations and what it means…
AI, china, Europe, Global Security News, Government & Policy, malware, Network Security
Italy moves to extradite Chinese national to the U.S. over hacking charges
Italy plans to extradite Xu Zewei to the U.S. over alleged hacks on COVID-19 research tied to state-backed operations. Italy is moving to extradite Xu Zewei, the Chinese national arrested in 2025 at the request of U.S. authorities on cyber-espionage charges, Bloomberg reported. The case stands out because it ties a single suspect, Xu, to…
Global Security News
Device codes are the new frontier for phishing as Barracuda detects 7 million attacks in four weeks
GUEST RESEARCH: Device code phishing has advantages over traditional credential phishing in stealth, persistence and evasion
AI, Exploits, Global Security News, malware, Network Security, Politics
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 94
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Morpheus: A new Spyware linked to IPS Intelligence The iPhone — invincible no more: a look at DarkSword and Coruna Lotus Wiper: a new threat targeting the energy and utilities sector New NGate variant hides in…
Global Security News
Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts
Research from Infoblox reveals a massive Click2SMS fraud scheme using fake CAPTCHAs and back button hijacking to trick victims into sending costly international texts.
Global Security News
Is AI Smarter Than Humans? It’s Complicated
As a neuroscientist, I conducted research into artificial versus human intelligence. The results surprised me—and suggest we’ve been worrying over the wrong things.
AI, Global Security News
Apple may be the only laptop vendor to grow in 2026
Chinese market research firm Sigmaintell expects Apple to be the only company to see growth in the laptop market this year. Overall, Sigmaintel predicts global notebook shipments will reach 181.1 million units this year, a decline of 8%. That drop will, in part, be caused by memory and component shortages and also by slowing market demand. That’s…
AI, Global Security News
Teradata Named a Leader in Nucleus Research 2026 DSML Platform Technology Value Matrix
GUEST RESEARCH: Recognition highlights Teradata’s enterprise AI capabilities, including Enterprise AgentStack, open-source MCP Server, and in-database vector and analytics infrastructure
china, Global Security News, Government & Policy
GopherWhisper: A burrow full of malware
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions
AI, Global Security News, Network Security
Gigamon Showcases Momentum in the Network Observability Market, as AI and Hybrid Cloud Drive Demand for Deep Observability
GUEST RESEARCH: Network observability market growth projected to be 6.5 percent to $4.39 billion by 2029, with AI-, cloud-, and security-driven segments poised to double or triple that pace
AI, Global Security News
Silobreaker Mimir adds agentic AI to intelligence workflows with governance and transparency
Silobreaker has announced new agentic AI capabilities that combine faster research and deeper contextual analysis with built-in governance and transparency to ensure trusted intelligence can be safely consumed across the wider enterprise. Silobreaker Mimir is an embedded agentic capability for intelligence operations, working directly within the analyst workflow. It helps teams retrieve evidence, deepen analysis,…
AI, Apps, Cybersecurity, Europe, Global Security News, Risk Management
Report: Enterprises Rely on Managed Services to Scale AI
New research has found that an overwhelming majority of executives view managed services as essential for the delivery of agentic AI. Boosting AI with managed services According to the global KPMG Managed Services Outlook Survey 2026, more than 90 percent of executives believe managed services are essential to their agentic AI journeys, and 87 percent…
AI, Apps, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
New Lazarus APT Campaign: “Mach-O Man” macOS Malware Kit Hits Businesses
Editor’s note: The research is authored by Mauro Eldritch, offensive security expert and a founder of BCA LTD, a company dedicated to threat intelligence and hunting. You can find Mauro on X. The recent wave of ClickFix attacks has introduced several new ways to compromise users, establishing itself as a technique that is likely here to stay. We have observed Lazarus Group using…
AI, Global Security News, malware, Risk Management
Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories
Our research on Void Dokkaebi’s operations uncovered a campaign that turns infected developer repositories into malware delivery channels. By spreading through trusted workflows, organizational codebases, and open-source projects, the threat can scale from a single compromise to a broader supply chain risk.
Global Security News, Government & Policy
Washington Rewrites the Rules of Funding Technological Innovation
For decades, the federal government supported basic scientific research. The Trump administration is trying to change that.
AI, Exploits, Global Security News, Government & Policy, malware, Network Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 93
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape CPU-Z / HWMonitor watering hole infection – a copy-pasted attack Fake Claude site installs malware that gives attackers access to your computer Malware Analysis Static SKILL for Codex JanelaRAT: a financial threat targeting users in Latin…
AI, Global Security News, malware
New RecruitRat, SaferRat, Astrinox, Massiv Android Malware Found Targeting 800 Apps
New research from Zimperium reveals four active Android malware campaigns, RecruitRat, SaferRat, Astrinox, and Massiv, targeting over 800 banking apps globally.
AI, Cybersecurity, Exploits, Global Security News, Risk Management
Commercial AI Models Show Rapid Gains in Vulnerability Research
AI models are making rapid gains in vulnerability research and exploit development, raising new cybersecurity risks, a Forescout study finds
Global Security News
7 Best DDoS Attack Simulation Service Providers & Testing Platforms for 2026
GUEST RESEARCH: In December 2025, a botnet unleashed a record-shattering 31.4 Tbps DDoS wave—proof that yesterday’s worst-case is today’s baseline.
AI, Global Security News
As Agentic AI Adoption Accelerates, Rubrik Warns of Growing Security Gaps
GUEST RESEARCH: New research from Rubrik Zero Labs highlights a critical lack of identity governance as organisations race to adopt autonomous systems they cannot fully observe or restore.
AI, Apps, Cybersecurity, Data Breaches, Data Security, Funding, Global Security News, Network Security, privacy, Risk Management, Venture
News Alert: NTT Research launches SaltGrain—advanced Attribute-Based Encryption security
SUNNYVALE, Calif., Apr. 15, 2026 – NTT Research, Inc., a division of NTT (TYO:9432), today announced the launch of Scale Academy, a startup incubator responsible for bringing to market products and services based upon technologies studied within the labs of NTT Research and NTT R&D. NTT Research also revealed Scale Academy’s first product, SaltGrain, a zero-trust data security suite…
Global Security News
5 key take aways for CIOs from Celonis’ 2026 Process Optimisation Report
GUEST RESEARCH: To modernise, or not to modernise. That is no longer the question. The question now is: how do I transform my enterprise thoughtfully while disrupting as minimally as possible?
AI, Global Security News
Solving Tech Debt Unlocks 3x Digital Revenue Boost for Australia’s AI Leaders, Finds New Research
Latest research reveals technical debt blocks AI success in Australia, but cohort of leaders is overcoming it to unlock AI and drive three times more digital revenue than peers
AI, Global Security News, Risk Management
Australian Organisations Risk Overloading Frontline Operations as AI Meets Fragile Mobility Foundations, SOTI Research Warns
GUEST RESEARCH: As Australian organisations accelerate the adoption of AI-enabled and mobile-driven workflows, research from SOTI, suggests many frontline environments may not yet be resilient enough to support the next wave of automation without added operational risk. This comes as Australia’s labour productivity growth remains under sustained pressure, increasing reliance on technology to deliver efficiency gains…
Global Security News, Government & Policy
Infoblox Threat Intel research links global mobile banking fraud wave to Cambodian scam compounds
GUEST RESEARCH: Android Trojan tied to forced-labour scam centres impersonates banks and governments in at least 21 countries, bypassing biometrics and SMS security.
AI, Global Security News
Agentic AI Goes Mainstream in the Enterprise, but 94% Raise Concern About Sprawl, OutSystems Research Finds
GUEST RESEARCH: New State of AI Development 2026 report shows how enterprises are exploring agentic AI, while navigating governance and security concerns
AI, Global Security News
Stacked Marketing Tools Stalling Aussie Brands’ AI ambitions: Twilio Poll
GUEST RESEARCH: Australian marketing and CX leaders have said that having too many disparate technology tools is making it harder to realise productivity gains from Agentic AI. This is according to a poll conducted by Twilio (NYSE: TWLO), the customer engagement platform that drives real-time, personalised experiences for today’s leading brands.
AI, APAC, Global Security News
Australia’s architecture, engineering, and construction industry leads world on digital transformation yet faces new data control and AI governance challenges
GUEST RESEARCH: Australia’s architecture, engineering, and construction (AEC) sector is emerging as one of the most digitally advanced markets globally. New research from Revizto, the leading global integrated collaboration platform for AEC, reveals Australia is now confronting a new generation of challenges around data governance, artificial intelligence (AI), regulation, and the capacity to implement new technologies at scale.
AI, Cybersecurity, Global Security News, Government & Policy, malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 92
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Thirty-Six Malicious npm Strapi Packages Deploy Redis RCE, Database Theft, and Persistent C2 Malicious LNK Files Distributing a Python-Based Backdoor and Changes in Distribution Techniques (Kimsuky Group) Hackers Are Attempting to Turn ComfyUI Servers Into a…
Global Security News, Government & Policy
Industrial Controllers Still Vulnerable As Conflicts Move to Cyber
The US government warns programmable logic controllers are being targeted, and research turns up 179 vulnerable operational technology (OT) devices.
AI, Global Security News
LevelBlue research finds CTOs push for enterprise alignment as human factors undermine cyber resilience
GUEST RESEARCH: New report finds 75 per cent of CTOs say unclear ownership impairs cyber resilience strategy.
AI, Global Security News
Genpact, Parallel Partner on Agentic AI Research Tools
Genpact has partnered with Parallel Web Systems to bring agentic AI-powered web research into enterprise workflows, aiming to accelerate decision-making and automation across insurance and sales operations. The collaboration integrates Parallel’s AI-native web research APIs into Genpact’s enterprise architecture, enabling agents to retrieve real-time data, automate analysis, and deliver verifiable insights for business users. Genpact…
AI, APAC, Apps, Global Security News, Network Security, Risk Management
LLM-generated passwords are indefensible. Your codebase may already prove it
Two independent research programs, one from AI security firm Irregular, one from Kaspersky, have now converged on the same conclusion: Every frontier LLM generates structurally predictable passwords that standard entropy meters catastrophically overrate. AI coding agents are autonomously embedding those credentials in production infrastructure, and conventional secret scanners have no mechanism to detect them. As…
AI, APAC, Apps, Global Security News, Network Security, Risk Management
LLM-generated passwords are indefensible. Your codebase may already prove it
Two independent research programs, one from AI security firm Irregular, one from Kaspersky, have now converged on the same conclusion: Every frontier LLM generates structurally predictable passwords that standard entropy meters catastrophically overrate. AI coding agents are autonomously embedding those credentials in production infrastructure, and conventional secret scanners have no mechanism to detect them. As…
Global Security News, Risk Management
AI Agents and Non-Human Identities Creating Critical Security Gaps, Report
New research from Keeper Security, reveals non-human identities and automated system-to-system interactions are becoming the top security risk for businesses in 2026.
AI, Data Breaches, Exploits, Global Security News
New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips
New academic research has identified multiple RowHammer attacks against high-performance graphics processing units (GPUs) that could be exploited to escalate privileges and, in some cases, even take full control of a host. The efforts have been codenamed GPUBreach, GDDRHammer, and GeForge. GPUBreach goes a step further than GPUHammer, demonstrating for the first time that
Global Security News
The Myth of the Lone Inventor Is Largely Just That—a Myth
Research confirms that small teams are more likely to achieve major breakthroughs, even if it doesn’t make for the best stories.
AI, Exploits, Global Security News, Government & Policy, malware, Network Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 91
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Infiniti Stealer: a new macOS infostealer using ClickFix and Python/Nuitka Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government RoadK1ll: A WebSocket Based Pivoting Implant axios Compromised: npm Supply Chain Attack via Dependency Injection …
Global Security News
Storm Infostealer Sold as Service, Targets Browsers, Wallets and Accounts
New research from Varonis Threat Labs reveals Storm infostealer, a malicious subscription service that bypasses Google Chrome encryption.…
AI, Global Security News
Ransomware Groups Exploit Legit IT Tools to Bypass Antivirus
New research from Seqrite explains the ‘dual-use dilemma,’ where ransomware attackers repurpose legitimate IT tools like IOBit Unlocker…
Global Security News, Network Security
ImageMagick Zero-Day Enables RCE on Linux and WordPress Servers
New research from Octagon Networks reveals a critical zero-day ImageMagick vulnerability that allows Remote Code Execution (RCE) via simple image uploads affecting Ubuntu, Amazon Linux, and WordPress. This magic byte shift bypasses even the most secure policies.
AI, Global Security News, Government & Policy, Network Security, Risk Management
Crypto industry may be running out of time to prepare for quantum attacks
Google’s latest research suggests the cryptocurrency industry may have less time than expected to prepare for quantum computing. In a whitepaper, Google examines risks to elliptic curve cryptography, the system securing most blockchain networks. The researchers revisit earlier assumptions about how difficult it would be for a quantum computer to break these protections, concluding that…
Global Security News
Building a flexible contractor workforce: strategies that work
PAXUS RESEARCH: For decades, flexibility in the workplace was seen as a perk. In 2026, it’s a business necessity.
AI, Global Security News
Download: 2026 SANS Identity Threats & Defenses Survey
New research from the 2026 SANS Identity Threats & Defenses Survey shows that 55% of organizations experienced an identity-related compromise last year, while 26% reported MFA fatigue as a factor in identity attacks. Download the report to learn: Why identity compromises remain common How attackers abuse authentication systems using valid credentials Where organizations struggle to…
AI, Cybersecurity, Global Security News, malware
Cybersecurity jobs available right now: March 31, 2026
Android Malware Research Director Alice | Israel | On-site – View job details As an Android Malware Research Director, you will establish operational processes, workflows, and quality standards for the team, while integrating the function into existing infrastructure. You will act as the primary client interface, managing relationships, presenting research findings, and ensuring client satisfaction.…
AI, Global Security News
TrendAI™ Research at RSAC 2026: Advancing Defense Across AI‑Driven and Cyber‑Physical Threats
TrendAI™ Research explored agentic AI cybercrime and EV infrastructure security through two research sessions at RSAC™ 2026.
AI, Global Security News
Amazon launches new education initiatives to support Aussie teachers and students thrive in a digital future
New research reveals 96% of teachers would take part in free AI training, but only 32% of teachers have access to approved tools they can use in the classroom. Amazon and Tech Futures Australia launch nationwide programs to help bridge this gap.
AI, Exploits, Global Security News, Government & Policy, malware, Network Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 90
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape New Malware Targets Users of Cobra DocGuard Software Government of Iran Cyber Actors Deploy Telegram C2 to Push Malware to Identified Targets Trivy Supply Chain Attack Expands to Compromised Docker Images VoidStealer: Debugging Chrome to Steal…
AI, Global Security News
Quish Splash QR Code Phishing Campaign Hits 1.6 Million Users
7AI research reveals a massive QR code phishing attack that evaded SPF, DKIM, and DMARC. Find out how 1.6 million emails went undetected.
AI, Apps, Global Security News, Risk Management
Keepit: Outages Fail to Drive Recovery Testing Gains
High-profile global outages aren’t changing how organizations prepare for disruption, according to new research from Keepit. The company’s 2026 Annual Data Report finds that even widely publicized cloud and security incidents have not led to increased recovery testing, exposing a persistent gap between risk awareness and operational readiness, especially among SMBs. Major outages fail to…
AI, Global Security News, Risk Management
Organisations overlook AI risk as governance fails to keep up
GUEST RESEARCH: TrendAI™ research reveals pressure to deploy AI for business speed is outpacing control, visibility and accountability
Global Security News
North Korean Hacker Lands Remote IT Job, Caught After VPN Slip
New research from LevelBlue reveals how a suspected North Korean operative landed a remote IT role to fund national weapons programmes.
AI, Global Security News, malware
15,500 Malicious Domains: How Threat Actors Abuse a Popular Ad Tracker for Cloaked AI Investment Scams
GUEST RESEARCH: New research from Infoblox Threat Intel and Confiant reveals that cybercriminals are abusing Keitaro, a widely used advertising performance tracker, to hide (“cloak”) scams and malware behind ordinary web traffic; with many posing specifically as AI investment opportunities.
AI, Global Security News
AI set to define law firm profitability as adoption gaps widen across the profession
GUEST RESEARCH: Global research finds Australian firms prioritising productivity gains as pricing pressure and workload constraints reshape legal economics
AI, china, Exploits, Global Security News, malware, Network Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 89
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter New Payload ransomware – malware analysis DRILLAPP: new backdoor targeting Ukrainian entities with possible links to Laundry Bear When Trusted Websites Turn Malicious: WordPress Compromises Advance Global Stealer Operation AI Coding Tools Under Fire:…
Exploits, Global Security News
Rapid7 2026 Global Threat Landscape Report Shows Exploited High and Critical-Severity Vulnerabilities Surged 105% as Attack Timelines Collapsed
GUEST RESEARCH: New research reveals exploitation now occurs within days of disclosure, reinforcing the need for preemptive security operations
AI, Global Security News, Risk Management
Delinea finds 90% of Australian Organisations Pressure Security Teams to Loosen Identity Controls for AI
GUEST RESEARCH: New research highlights visibility gaps around AI-driven identities, rising NHI risks, and an AI security confidence paradox
Global Security News
The Unexpected Risk of Letting ChatGPT Fact-Check Your Financial Adviser
Research shows that advisers find it more insulting to be double-checked by a chatbot than by a human rival.
AI, Apps, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, Risk Management
AI Email Summaries Create a New Phishing Attack Surface
Artificial intelligence (AI) assistants are rapidly becoming a core part of workplace productivity, but new research suggests they may also introduce a previously overlooked phishing vector. Permiso researchers found that attacker-controlled text embedded in emails can manipulate Microsoft Copilot summaries through cross prompt injection attacks (XPIA), potentially inserting deceptive security alerts or malicious prompts into…
AI, Global Security News
IDC lowers its PC sales forecast again — and significantly
Research firm IDC has lowered its forecast for the PC market in 2026. According to the new assessment, global PC shipments are now expected to decline by 11.3%, compared to the previous forecast of a 2.4% drop. Tablet shipments are also expected to fall by 7.6%. The decline is attributed to memory shortages, rising component…
AI, Data Breaches, Global Security News
Hackers tried to breach Poland’s nuclear research centre
Poland’s National Centre for Nuclear Research (NCBJ) thwarted a cyberattack targeting its IT infrastructure. The attempted intrusion was detected and blocked before attackers could compromise systems or disrupt operations. “No production, operational, or research processes were disrupted, and the MARIA reactor is operating safely and smoothly, at full power,” said Prof. Jakub Kupecki, Director of…