“If Defender offline scan was initiated in the victim machine at any point then there is no need to login, the machine is automatically vulnerable,” the researcher, who goes online by the name Nightmare Eclipse or Chaotic Eclipse, said in… Read More "GreatXML zero-day BitLocker bypass doesn’t seem to work, yet"
Interpreting the vast cybersecurity vendor landscape through the lens of industry analysts and testing authorities can immensely enhance your cyber-resilience. 10 Dec 2025 • , 7 min. read Skip to the next paragraph if your eyes glaze over at the… Read More "How to harness today’s diverse analyst and tester landscape to paint a security masterpiece"
The education sector has found itself in the crosshairs of a ShinyHunters “pay or leak” extortion campaign following the compromise of Instructure, the company behind the Canvas Learning Management System. The original compromise of Instructure occurred on April 25 with… Read More "ShinyHunters Escalates Canvas Extortion – Infosecurity Magazine"
Ravie LakshmananJun 12, 2026Cybercrime / Artificial Intelligence Google on Friday said it’s pursuing legal action against a Chinese cybercrime network, accusing it of using its Gemini artificial intelligence (AI) agent to send phishing text messages targeting Americans. The network is… Read More "Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing"
I recently had, what I thought, was a unique brainwave. (Spoiler alert: it wasn’t, but please read on!) As a marketing leader at ESET UK, part of my role is to communicate how our powerful and comprehensive solutions can be… Read More "What Schrödinger can teach us about cybersecurity"
The US Federal Communications Commission (FCC) has extended the deadline for owners of banned internet routers to provide security updates to US-based users by two years. In March 2026, the Commission banned the import and sale of all “consumer-grade” internet… Read More "US: FCC Relaxes Foreign-Made Router Ban to Allow for Security Updates"
Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest… Read More "Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit"
Being seen as reliable is good for ‘business’ and ransomware groups care about ‘brand reputation’ just as much as their victims 11 Dec 2025 • , 4 min. read Black Hat Europe 2025 opened with a presentation by Max Smeets… Read More "Reputation is currency – even in the ransomware economy"
Cybercriminals have been using AI to identify and exploit a zero-day vulnerability successfully for the first time, Google Threat Intelligence Group (GTIG) has warned. Published on May 11, the GTIG AI Threat Tracker report said that “prominent” cybercrime threat actors… Read More "Hackers Observed Using AI to Develop Zero-Day for the First Time"
Behavioral Baseline Monitoring Learns normal workload behavior; flags only statistically significant deviations, not every anomaly Fileless attacks, lateral movement, insider threats Runtime Protection Evaluates process execution in context; auto-scaling and pipeline tasks are recognized as expected Memory-based exploits, malicious code… Read More "Cloud Workload Protection and False Positive Reduction"
