SecurityNewSAP Patch Day Highlights Critical Risks in Core Business Systems
New security disclosures address high-stakes vulnerabilities in NetWeaver and Commerce Cloud, demanding immediate enterprise action.
> Search
30 results for “security”
SecurityNew
Cyber CrimeNewLidl Breach Highlights Perils of Third-Party Data Dependencies
A breach at a third-party IT vendor has exposed personal data of Lidl customers, forcing a security alert across multiple countries.
SecurityNewGrok Build Exfiltration: When AI Tools Overreach Their Access
A deep dive into how an xAI coding tool silently moved entire repositories to cloud storage, bypassing standard privacy expectations.
Cyber CrimeNewForg365 and the Industrialization of Account Takeover Tactics
A Telegram-based phishing service is lowering barriers to entry for M365 attacks by automating complex bypass and exfiltration workflows.
Cyber CrimeNewSupply Chain Breach Hits Jscrambler NPM Package Integrity
Compromised publishing credentials allowed attackers to inject malicious binaries into widely used Jscrambler NPM versions.
SecurityNewWhy Your Current Incident Response Plan Will Fail Against AI
Traditional security frameworks are ill-equipped to handle the probabilistic, non-deterministic failures of modern AI models.
SecurityNewPentagon Halts CMMC Phase 2 Rollout Amid Defense Industry Overhaul
A 60-day review of the CMMC program aims to reduce compliance friction for small firms while maintaining core security standards.
SecurityNewThe Velocity of Machines: AI Agents Disrupt Modern Incident Response
Autonomous AI tools are accelerating breach lifecycles, forcing a pivot from human-speed defense to machine-speed mitigation strategies.
SecurityNewStudent Proxy Campaign Turns npm Into a Distributed DDoS Weapon
A swarm of 148 malicious npm packages exploited student browsers to fuel a sophisticated, dual-layered botnet operation.
SecurityNewBeyond Credentials: The Year Salesforce Was Used Against Itself
Microsoft details how threat actors bypassed traditional defenses to compromise Salesforce environments via OAuth and guest access.
SecurityState-Sponsored Botnets Turn Home Infrastructure Into Silent Weaponry
Federal authorities warn that Russian hackers are leveraging compromised SOHO routers to mask intrusions into critical infrastructure.
Cyber CrimeUS Targets Russian Hacking Groups With Massive $10 Million Bounty
Federal authorities are hunting two state-linked cyber groups behind a persistent, large-scale campaign targeting Signal and WhatsApp.
SecurityWhy Your Enterprise Router is an Open Door for State-Sponsored Spies
A multinational security alert warns that outdated network management protocols and neglected hardware are fueling persistent cyberespionage.
SecurityAI Agents Face Remote Execution Risks in Standard Defensive Workflows
Researchers reveal that automated vulnerability scanning tools from Anthropic and OpenAI can be tricked into executing malicious code.
SecurityEU and UK Escalate Defensive Stance Against Russian Cyber Networks
Joint sanctions targeting military intelligence and private threat actors aim to disrupt an expansive Russian ecosystem of digital aggression.
SecurityGhostApproval Exposes the Illusion of AI-Guided Human Oversight
A systemic vulnerability across major AI coding assistants highlights the dangerous failure of human-in-the-loop security protocols.
SecurityRedmond Patches RoguePlanet Zero-Day Amidst Ongoing Researcher Conflict
Microsoft has addressed the RoguePlanet vulnerability, ending a contentious saga with security researcher Nightmare Eclipse.
SecurityModHeader Fallout: Trusted Extensions Harboring Dormant Data Traps
A popular header-editing tool was removed from major stores after researchers discovered a silent, encrypted exfiltration system.
SecurityThe Hidden Ledger of AI-Powered Development Costs
While AI coding tools promise efficiency, hidden security overheads and remediation expenses are complicating the true return on investment.
SecurityGigaWiper: The Modular Threat Merging Espionage With Total Destruction
Microsoft identifies a sophisticated new backdoor, GigaWiper, which stitches together existing malware to facilitate targeted data destruction.
SecurityCrowdStrike Exposes New Vulnerabilities in Generative AI Models
Researchers have identified five unique prompt injection techniques that exploit how large language models process user inputs.
Congress Challenges CISA Over Massive Contractor Credential Leak
A leaked GitHub repository containing agency secrets has sparked a congressional investigation into CISA’s internal security posture.
Cyber CrimeDutch Server Raids Expose Infrastructure Ties to Russian Operations
Authorities seized 800 servers in a probe targeting individuals accused of facilitating cyberattacks through sanctioned networks.
Cyber CrimeAI Gateways Face New Threats as Attackers Pivot to Cryptomining
Researchers have identified a new vector where cloud-hosted AI infrastructure is being hijacked for illicit cryptocurrency operations.
Progress Forces ShareFile Shutdown Over Credible Security Threat
Enterprise users instructed to disable Storage Zone Controllers as an investigation into a potential external security breach unfolds.
SecurityMicrosoft Halts Secure Boot Updates Amid Hardware Compatibility Issues
A critical firmware certificate rollout has been paused for specific Windows 11 devices following reports of update failures.
SecurityCrashStealer Malware Evades MacOS Defenses via Signed Notarization
A sophisticated new C++ information stealer leverages legitimate Apple developer IDs to bypass Gatekeeper and harvest user credentials.
SecurityInfrastructure Paralysis at Japan's Leading Taxi Operator
Nihon Kotsu has taken critical systems offline following a security breach that disrupted dispatch and reservation capabilities.
SecurityGoogle Chrome Zero-Day Vulnerabilities Demand Urgent User Vigilance
A critical high-risk vulnerability in Chrome’s Intents feature has been patched, marking the fifth exploited zero-day of the year.
SecurityWhy AI is Forcing a Seismic Shift in Cybersecurity Strategy
Check Point CTO Jonathan Zanger discusses how AI scales defense operations and complicates the enterprise threat landscape.