Latest News

HTTPS certificate issuance now requires Multi-Perspective Issuance Corroboration and linting to improve validation.

A threat actor tracked as Morphing Meerkat abuses DNS mail exchange (MX) records to deliver spoofed login pages.

The Grandoreiro banking trojan has reemerged in new campaigns targeting users in Latin America and Europe.

Firefox developers have determined that their browser is affected by a vulnerability similar to the recent Chrome sandbox escape zero-day.

Splunk patches high-severity remote code execution and information disclosure flaws in Splunk Enterprise and Secure Gateway App.

Russian-speaking espionage group RedCurl has been deploying ransomware on victims’ networks in a recent campaign.

The UK ICO has fined Advanced Computer Software Group £3 million ($3.8 million) over a 2022 data breach resulting from a ransomware attack.

Interview with Taylor Pyle, a Cybersecurity Engineer at Viasat on her experience with both cyber and mentorship.

GetReal Security has raised $17.5 million in series A funding to combat deepfakes, impersonation, and other AI-generated threats.

US defense contractor MORSE Corp has agreed to pay $4.6 million to settle allegations over its cybersecurity failures. 

ESET uncovers a link between RansomHub, Play, Medusa, and BianLian ransomware gangs as more groups adopt tools to disable EDR software.

T-Mobile paid $33 million in a private arbitration process over a SIM swap attack leading to cryptocurrency theft.

Forescout has found dozens of vulnerabilities in solar power systems from Sungrow, Growatt and SMA.

Straiker has emerged from stealth mode with a solution designed to help enterprises secure AI agents and applications.

OpenAI has raised its maximum bug bounty payout to $100,000 (up from $20,000) for high-impact flaws in its infrastructure and products.