Ravie LakshmananFeb 04, 2026Artificial Intelligence / Software Security Microsoft on Wednesday said it built a lightweight scanner that it said can detect backdoors in open-weight large language models (LLMs) and improve the overall trust in artificial intelligence (AI) systems. The… Read More "Microsoft Develops Scanner to Detect Backdoors in Open-Weight Large Language Models"
Security filters caught one phishing email every 19 seconds in 2025, more than double the rate a year previously, Cofense has revealed. AI technology is helping threat actors to increase the speed and scale of attacks, to the point where… Read More "AI Drives Doubling of Phishing Attacks in a Year"
A long-running malware operation known as SystemBC has been linked to more than 10,000 infected IP addresses worldwide, including systems associated with sensitive government infrastructure. According to new research by Silent Push, the findings reinforce concerns about the malware’s continued… Read More "Global SystemBC Botnet Found Active Across 10,000 Infected Systems"
Threat actors affiliated with China have been attributed to a fresh set of cyber espionage campaigns targeting government and law enforcement agencies across Southeast Asia throughout 2025. Check Point Research is tracking the previously undocumented activity cluster under the moniker… Read More "China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns"
Es ist nicht überraschend, dass sowohl SAST- als auch DAST-Tools in Zusammenhang mit der Absicherung von Softwarelieferketten wieder an Bedeutung gewinnen. Schließlich geben sie den Entwicklern die Werkzeuge an die Hand, um sicheren Code bereitzustellen – entweder als Teil eines… Read More "Die besten DAST- & SAST-Tools"
A sprawling malicious infrastructure linked to the ShadowSyndicate cybercrime cluster has been expanded following the discovery of new technical markers that connect dozens of servers to the same operator. The findings add fresh detail to a threat actor already associated… Read More "New Technical Markers Reveal Expanding ShadowSyndicate Infrastructure"
Ravie LakshmananFeb 04, 2026Software Security / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting SolarWinds Web Help Desk (WHD) to its Known Exploited Vulnerabilities (KEV) catalog, flagging it as actively exploited… Read More "CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalog"
Conditional Access policies form the final leg of the prerequisite triangle. These aren’t optional — they’re how you enforce the “trust zero, verify always” principle of Zero Trust. The National Institute of Standards and Technology defines Zero Trust architecture as… Read More "Going fully passwordless in hybrid enterprise environments"
Researchers at Pillar Security have found two maximum severity vulnerabilities (CVSS score of 10.0) in n8n, a popular open-source workflow automation platform powering hundreds of thousands of enterprise AI systems worldwide. The flaws are sandbox escape vulnerabilities which, when exploited,… Read More "Two Critical Flaws Found in n8n AI Workflow Automation Platform"
Ransomware groups have averaged nearly 700 victims a month in the last four months, and many attacks have posed supply chain risks. Ransomware groups claimed more than 2,000 attacks in the last three months of 2025 – and they’re starting 2026 at the same elevated pace. Cyble recorded 2,018 claimed attacks by ransomware groups in the fourth… Read More "Ransomware Groups Surge In Q4 2025 – Cyble Insights"
