A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account 07 Oct 2026 • , 6 min. read For a YouTuber, the approach may look like routine business: a personalized sponsorship email from a global brand and… Read More "Inside a brand deal scam targeting YouTube creators"
Thomson Reuters has disclosed a cybersecurity incident impacting its court management software, which has resulted in a breach of sensitive case data across Canada and the US. The company detected activity affecting information held in its C-Track product, a digital… Read More "US and Canadian Court Records Breached Following Thomson Reuters Incid"
Ravie LakshmananOct 08, 2026Artificial Intelligence / Cloud Security The npm package known as “tensorlake,” a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The… Read More "Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm"
Cyberespionage has remained a constant feature of Russia’s war against Ukraine. ESET Research has long tracked Gamaredon, one of the most active Russia-aligned advanced persistent threat (APT) groups targeting Ukraine. The group, attributed by the Security Service of Ukraine (SSU)… Read More "Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances"
Cybersecurity industry body CREST has granted 10 companies with its newly established accreditation that recognizes responsible use of AI within penetration testing services. This AI-Enabled Penetration Testing accreditation is a new optional module integrated in July 2026 into CREST’s existing… Read More "CREST Onboards First Cohort for AI-Enabled Pentesting Accreditation"
Key takeaways: UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. The IDC MarketScape recognized UpGuard for the following strengths: “UpGuard delivers full life-cycle TPRM management, from discovery through reassessment and… Read More "The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management"
Your business may be small, but its attack surface is anything but. Readiness is the first step to resilience. 26 Jun 2026 • , 5 min. read SMB cybersecurity isn’t always given the attention it deserves, including by small businesses… Read More "SMB cyber readiness: the road to resilience starts here"
A phishing-as-a-service (PaaS) operation has continued generating new campaigns despite a coordinated takedown effort, with more than 700 new phishing pages identified within a month of the disruption. Group-IB said its researchers had tracked the Outsider Phishing Kit, operated by… Read More "Outsider Phishing Kit Survives Takedown With 700 New Pages"
Most brand protection solutions rely on one assumption: scam activity happens on the open web. Security teams focus on catching fake domains, social profiles, marketplace listings, paste sites, and dark web forums. While that covers a lot of ground, it… Read More "The Blind Spot in Brand Protection: Why App Stores Slip Past Standard Monitoring"
Your inbox is an identity system all of its own: whoever owns it may own a lot more 29 Jun 2026 • , 5 min. read Email is not just a means of communication, or yet another online account. In… Read More "Inside the inbox: Why cybercriminals want to break into your email account"
