Infosec stories
Attackers are abusing Windows screensaver files in a spearphishing campaign to stealthily install remote access tools on business systems.
Callback phishing jumps sixfold as BEC fraud stays dominant, with criminals weaponising CAPTCHAs, trusted brands and cloud platforms.
Moltbook's boom in user-built AI agents is fuelling mounting warnings over cyber threats and brand damage as governance lags adoption.
Tenable warns critical Google Looker flaws could enable server takeover and data theft, leaving unpatched self-hosted deployments exposed.
DryRun launches DeepScan Agent, an AI tool that scans whole codebases in hours to rank real-world security risks and speed remediation.
As most ransomware strikes after hours, small firms face a costly 3 AM security gap that only round-the-clock MDR can realistically close.
Tenable warns unpatched self-hosted Google Looker systems face remote takeover, data theft and cross-tenant cloud attack risks.
AI, quantum threats and tougher regulation will reshape cyber strategies by 2026, forcing new governance, identity models and SOC workflows.
YubiKey rollout boosts ROI by 265% and slashes breach exposure 99.99%, Forrester study finds, delivering multi-million USD $ gains.
Semperis has bought MightyID to extend its identity resilience platform with Okta and Ping backup and recovery across hybrid environments.
FireMon and Illumio link microsegmentation with firewall policies in one platform to cut conflicts and speed Zero Trust deployments.
A security lapse at AI agent service Moltbook exposes risky default database settings, raising fresh alarms over agentic system safeguards.
As quantum computing looms, nations race to build sovereign cyber and post-quantum encryption to safeguard critical digital infrastructure.
ENCS and DIVD have agreed a new cyber pact to uncover and disclose vulnerabilities in Europe's high-impact energy and critical systems.
EnSilica has joined the CHERI Alliance, aiming to embed hardware memory safety in custom chips for industrial, automotive and IoT systems.
Attackers are hijacking live web sessions by stealthily tampering with NGINX configs, silently relaying traffic via rogue servers.
Cynomi expands its governance platform for MSPs with new NIS 2 tools for Croatia and Belgium and broader AI oversight across Europe.
CyberFOX secures nine-figure backing from Level Equity and Radian to scale MSP-focused security tools, AI projects and global expansion.
Most senior UK cyber staff fear they could be sacked over a breach, as new research reveals soaring stress, burnout and blame culture.
AI-fuelled cyber attacks surged 70% in 2025, with Check Point warning of machine-speed, multi-channel campaigns targeting key sectors.
