The UK’s professional body for the cybersecurity sector has launched a new title designed to support more people at the start of their careers in the industry. UK Cyber Security Council said that the Associate Cyber Security Professional title is… Read More "UK Cyber Security Council Launches Associate Cyber Security Profession"
Google has announced the availability of end-to-end encryption (E2EE) in Gmail for enterprise users on Android and iOS. Building on the rollout of Gmail E2EE for enterprise inboxes last year, the improved privacy measure now allows users to read and… Read More "Gmail Brings End-to-End Encryption to Android and iOS for Enterprise Users"
OpenAI revealed a GitHub Actions workflow used to sign its macOS apps, which downloaded the malicious Axios library on March 31, but noted that no user data or internal system was compromised. “Out of an abundance of caution, we are taking steps to… Read More "OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident"
The number of AI-enabled cyber-attacks has nearly doubled during the last year, CrowdStrike has warned, as threat actors deployed machine learning and Large Language Models (LLMs) to help optimize attack techniques and hacking campaigns. According to the CrowdStrike Global Threat… Read More "AI-powered Cyber-Attacks Up Significantly, Warns CrowdStrike"
Generative AI firm Anthropic said three Chinese AI companies have generated millions of queries with the Claude large language model (LLM) in order to copy the model – a technique called ‘model distillation attack.’ In a new blog published on… Read More "Chinese AI Firms Hit Claude with Distillation Attacks, Anthropic Warns"
AI is helping threat actors to accelerate attacks, but it can also empower incident responders to quickly contain threats, ReliaQuest has claimed in a new report. The firm’s Annual Cyber-Threat Report 2026 is based on an analysis of customer incidents. It… Read More "AI Accelerates Attacker Breakout Time to Just Four Minutes"
Der Blick auf eine High-Level-SSO-Architektur. Foto: Foundry / Matthew Tyson In jedem Fall erfordert Federated Identity Management eine zentrale Institution, die die gemeinsamen Anmeldeinformationen zwischen den verschiedenen Diensten vermittelt. Dabei kann es sich um einen Identity Manager handeln, der: von… Read More "Was ist Federated Identity Management?"
A new wave of cyber-attacks using Medusa ransomware has been linked to North Korean state-backed hackers, who continue to target the US healthcare sector despite recent indictments. Researchers from the Symantec and Carbon Black Threat Hunter Team said the attackers deployed… Read More "North Korean Lazarus Group Expands Ransomware Activity With Medusa"
A sophisticated phishing campaign impersonating cryptocurrency brokerage Bitpanda has been uncovered by cybersecurity researchers. The operation, detailed in a new advisory by the Cofense Phishing Defense Center, combines credential theft with extensive personal data harvesting, using a near-perfect replica of… Read More "Multifaceted Phishing Scheme Deceives Bitpanda Customers"
Employee negligence driven by shadow AI cost organizations more than any other type of insider risk last year, accounting for 53% of the $19.5m lost on average per business, according to DTEX. The security vendor’s Cost of Insider Risks 2026… Read More "Cost of Insider Incidents Surges 20% to Nearly $20m"
