In the wee hours of the night last April, someone stopped at roughly 20 street intersections across Silicon Valley and launched an unprecedented cyberattack that would eventually spread to multiple states, embarrassing local officials and prompting them to question their… Read More "The Dumbest Hack of the Year Exposed a Very Real Problem"
A website posing as a legitimate Anthropic Claude domain was caught serving a remote access trojan to its visitors, Malwarebytes reports. Relying on Claude’s popularity, a threat actor created a site that hosts a download link pointing to a ZIP… Read More "Fake Claude Website Distributes PlugX RAT"
Like others, Hornstein relies on longstanding security principles, citing the confidentiality, integrity, and availability (CIA) triad as the foundation for his approach to ensure that AI works within established guardrails and that he can observe its behavior. Hornstein is also… Read More "CISOs tackle the AI visibility gap"
The UK’s professional body for the cybersecurity sector has launched a new title designed to support more people at the start of their careers in the industry. UK Cyber Security Council said that the Associate Cyber Security Professional title is… Read More "UK Cyber Security Council Launches Associate Cyber Security Profession"
Google has announced the availability of end-to-end encryption (E2EE) in Gmail for enterprise users on Android and iOS. Building on the rollout of Gmail E2EE for enterprise inboxes last year, the improved privacy measure now allows users to read and… Read More "Gmail Brings End-to-End Encryption to Android and iOS for Enterprise Users"
OpenAI revealed a GitHub Actions workflow used to sign its macOS apps, which downloaded the malicious Axios library on March 31, but noted that no user data or internal system was compromised. “Out of an abundance of caution, we are taking steps to… Read More "OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident"
The number of AI-enabled cyber-attacks has nearly doubled during the last year, CrowdStrike has warned, as threat actors deployed machine learning and Large Language Models (LLMs) to help optimize attack techniques and hacking campaigns. According to the CrowdStrike Global Threat… Read More "AI-powered Cyber-Attacks Up Significantly, Warns CrowdStrike"
Generative AI firm Anthropic said three Chinese AI companies have generated millions of queries with the Claude large language model (LLM) in order to copy the model – a technique called ‘model distillation attack.’ In a new blog published on… Read More "Chinese AI Firms Hit Claude with Distillation Attacks, Anthropic Warns"
AI is helping threat actors to accelerate attacks, but it can also empower incident responders to quickly contain threats, ReliaQuest has claimed in a new report. The firm’s Annual Cyber-Threat Report 2026 is based on an analysis of customer incidents. It… Read More "AI Accelerates Attacker Breakout Time to Just Four Minutes"
Der Blick auf eine High-Level-SSO-Architektur. Foto: Foundry / Matthew Tyson In jedem Fall erfordert Federated Identity Management eine zentrale Institution, die die gemeinsamen Anmeldeinformationen zwischen den verschiedenen Diensten vermittelt. Dabei kann es sich um einen Identity Manager handeln, der: von… Read More "Was ist Federated Identity Management?"
