a new SecOps Labs allows developers to access AI-powered experiments for parsing, detection, and response. new dashboards, now generally available, showcase the native integration of SOAR data. It helps admins visualize, analyze, and act on security data. “Our momentum in… Read More "New security features beef up Google Cloud Platform"
Here’s what you need to know about the inner workings of modern spyware and how to stay away from apps that know too much 01 Aug 2025 The world of espionage has gone digital. Rather than involving trench coats and… Read More "Is your phone spying on you?"
A critical vulnerability in SAP NetWeaver AS Java Visual Composer, tracked as CVE-2025-31324, is now being widely exploited following the release of public exploit tooling. The flaw, patched in April 2025, allows unauthenticated remote code execution via the platform’s metadata… Read More "Public Exploit Released for Critical SAP NetWeaver Flaw"
Vendor risk monitoring software provides your organization with a continuous, data-driven view of third- and fourth-party security vulnerabilities, including open ports, leaked credentials, and misconfigured cloud storage buckets. Detecting critical security changes as they occur empowers your team to act… Read More "Top 8 Vendor Risk Monitoring Solutions in 2025"
As legal cannabis has expanded around the United States for both recreational and medical use, companies have amassed troves of data about customers and their transactions. People who have applied for medical marijuana cards have had to share particularly personal… Read More "Highly Sensitive Medical Cannabis Patient Data Exposed by Unsecured Database"
Aug 19, 2025Ravie LakshmananMalware / Cyber Attack Financial institutions like trading and brokerage firms are the target of a new campaign that delivers a previously unreported remote access trojan called GodRAT. The malicious activity involves the “distribution of malicious .SCR… Read More "New GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT Code"
Gestohlene Daten stehen zum Verkauf Unterdessen hat ein Angreifer, der behauptet, mit der Ransomware-Bande WarLock in Verbindung zu stehen und den Decknamen „cnkjasdfgd“ verwendet, öffentlich die Verantwortung für den Angriff übernommen. Die Gruppe bietet eine Million Dokumente zum Verkauf an,… Read More "Cyberangriff auf Colt: Support-Systeme nach Lösegelddrohung offline"
Can you tell the difference between legitimate marketing and deepfake scam ads? It’s not always as easy as you may think. 18 Aug 2025 • , 4 min. read As economic uncertainty and persistent inflation are eroding our pay checks… Read More "AI-powered financial scams swamp social media"
A cyber-attack on Allianz Life in July has exposed the personal information of about 1.1 million customers, according to new data by Have I Been Pwned. The breach targeted a cloud-based customer relationship management (CRM) system and is part of a… Read More "Allianz Life Data Breach Exposes Personal Data of 1.1 Million"
The proliferation of AI has rapidly introduced many new software technologies, each with its own potential misconfigurations that can compromise information security. Thus the mission of UpGuard Research: discover the vectors particular to a new technology and measure its cyber… Read More "Analyzing llama.cpp Servers for Prompt Leaks"
