Build security into the business, not around it The most effective cybersecurity programs are not created in isolation. They are built through partnership with the teams responsible for driving the business forward. For CSOs, that means getting involved earlier, before… Read More "How CSOs can turn cybersecurity into a business growth strategy"
A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to new research from French security firm Lexfo, the open directory was a Python HTTP server left running on a Budapest virtual private… Read More "Open Directory Exposes Three Evilginx Phishing Operators"
Having a plan to back up your data is one of the most important processes to protect the data in the event of a cyber attack. Should a malware or ransomware attack occur, you can boot a saved backup and… Read More "6 Data Backup Strategies That Prevent Costly Data Loss"
Google Cloud has published an updated roadmap for migrating its infrastructure to post-quantum cryptography (PQC), targeting full readiness by 2029, with some work expected to continue into the next decade. In March, Google announced it was moving up its timeline… Read More "Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal"
The Americas carried the heaviest ransomware burden of any region on the planet in the first half of 2026. According to Cyble Research and Intelligence Labs (CRIL), North and South America combined experienced 2,188 documented ransomware attacks between January and… Read More "Ransomware Threats In The Americas H1 2026: Deep Dive"
Oracle is also concerned about the threat posted by the launch of bug-hunting AI model Mythos. In May it responded by accelerating its patching schedule, switching to monthly releases rather than quarterly. The first monthly batch fixed 35 flaws. Oracle… Read More "Oracle’s new database security tool is free — for six months"
New analysis of the ExfilSquad data extortion group has tied it to leaked data from at least 13 victims from sectors including government, education, financial services and manufacturing. Fortra Intelligence and Research Experts (FIRE) have reviewed data samples made public… Read More "Researchers Confirm ExfilSquad’s Access to Sensitive Data"
An intrusion detection system (IDS) is a software application or hardware device that detects vulnerability exploits, malicious activity, or policy violations. IDSs place sensors on network devices like firewalls, servers, and routers, or at a host level. Once the IDS… Read More "Intrusion Detection Systems (IDS): Types, How They Work, and Tools"
Most of the 2,500 organizations believed to have been affected by the LiteLLM supply chain attack were actually exposed before, SOCRadar reports. The compromise was blamed on and claimed by TeamPCP, the threat actor behind multiple open source software (OSS)… Read More "Trivy, Not LiteLLM Behind the 2,500 Org Compromise"
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco. The attack appears similar to those perpetrated by the extortion group ShinyHunters, Reco said. ShinyHunters has been particularly active this year,… Read More "Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks"
