Dec 17, 2025Ravie LakshmananVulnerability / Malware The threat actor linked to Operation ForumTroll has been attributed to a fresh set of phishing attacks targeting individuals within Russia, according to Kaspersky. The Russian cybersecurity vendor said it detected the new activity… Read More "New ForumTroll Phishing Attacks Target Russian Scholars Using Fake eLibrary Emails"
From unintentional data leakage to buggy code, here’s why you should care about unsanctioned AI use in your company 11 Nov 2025 • , 5 min. read Shadow IT has long been a thorn in the side of corporate security… Read More "Why shadow AI could be your biggest security blind spot"
A security flaw in the Motors WordPress theme has been disclosed that could allow logged-in users with minimal privileges to gain full control of affected websites. The issue involves an arbitrary file upload vulnerability that allows Subscribers and higher-level users… Read More "Motors WordPress Vulnerability Exposes Sites to Takeover"
Expand your mind, man. Opsec is really all about time travel—taking small, protective steps now before you have a disaster on your hands later. If you’re not on auto-delete, then an explosive, emotional text exchange with the person you’re currently… Read More "The WIRED Guide to Digital Opsec for Teens"
Dec 17, 2025Ravie LakshmananEmail Security / Threat Intelligence The Russian state-sponsored threat actor known as APT28 has been attributed to what has been described as a “sustained” credential-harvesting campaign targeting users of UKR[.]net, a webmail and news service popular in… Read More "APT28 Targets Ukrainian UKR-net Users in Long-Running Credential Phishing Campaign"
Eine russische Cyberspionage-Kampagne zielt auf Energieversorger. Evgeny_V – shutterstock.com Das Team von Amazon Threat Intelligence stellte fest, dass eine vom russischen Staat geförderte Cyberspionagegruppe vermehrt Energieunternehmen und Anbieter kritischer Infrastrukturen (KRITIS) ins Visier genommen hat. Die Gruppe ist demnach seit… Read More "Russische APT-Gruppe greift westliche KRITIS-Betreiber an"
Online disagreements among young people can easily spiral out of control. Parents need to understand what’s at stake. 27 Nov 2025 • , 5 min. read The digital world offers countless opportunities for self-expression, learning and personal development, but it’s… Read More "What parents should know to protect their children from doxxing"
ISACA has been appointed by the US Department of Defense (DoD) as the global credentialing authority for the Cybersecurity Maturity Model Certification (CMMC) program, ensuring defense contractors meet strict cybersecurity standards. The DoD introduced CMMC in 2020 to make sure companies… Read More "ISACA Named Global Credentialing Authority for DoD’s CMMC Program"
Flock, the automatic license plate reader and AI-powered camera company, uses overseas workers from Upwork to train its machine learning algorithms, with training material telling workers how to review and categorize footage including images people and vehicles in the United… Read More "Flock Uses Overseas Gig Workers to Build Its Surveillance AI"
ACSC’s Technology Primer explains how Quantum Technology will impact cybersecurity, encryption, and long-term risk planning for organizations. The Australian Cyber Security Centre (ACSC) has published a new guide, Quantum Technology Primer: Overview, aimed at helping organizations understand the field of… Read More "ACSC Guide On Quantum Technology And Cybersecurity"
