Starmer did not go into a lot of detail, preferring to let technology companies craft their own plans, but in this case the details matter. Analysts and consultants said that there has been a push for everything to happen on-device,… Read More "UK move to filter photos and messages triggers encryption worries for CISOs"
ESET researchers analyzed the 2025 activity of Webworm, a China-aligned APT group that started out targeting organizations in Asia, but has recently shifted its focus to Europe. Even though this is our first public blogpost on the group, we have… Read More "Webworm: New burrowing techniques"
A new phishing-as-a-service (PhaaS) platform called Kali365 is being distributed in the wild, primarily via Telegram, the FBI has warned. First detected in April 2026, Kali365 provides cyber threat actors access to AI-generated phishing lures, automated campaign templates real-time targeted… Read More "FBI Warns ‘Kali365’ Phishing Kit Hijacks Microsoft 365 OAuth Tokens"
The survey of thousands of security leaders exposes an underlying naivete about AI-built code and its vulnerabilities, even as tools like Anthropic’s Mythos are uncovering security flaws orders of magnitude faster than any human security team could ever hope to.… Read More "Enterprises know AI-generated code is vulnerable; they’re shipping it anyway"
Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and personal data 22 May 2026 • , 5 min. read As the FIFA World Cup 2026™ in the United States, Canada, and… Read More "Scams target soccer fans with fake World Cup tickets, merchandise"
A surge in phishing emails lacking subject lines has been identified as part of a widespread campaign targeting high-value users. According to findings detailed by cybersecurity company Cyberproof on April 21, the activity, known as silent subject or null subject phishing, is… Read More "Surge in Silent Subject Phishing Campaigns Targets VIP Users"
There’s one cognitive bias that we humans are prone to, and it lies at the centre of some of the challenges that cybersecurity professionals face every day. It’s known as the normalcy bias – what Dr. Lauren Braithwaite defines as… Read More "the ‘auditors’ you never hired"
The UK government has announced a £90m ($120m) injection into cybersecurity aiming to strengthen the nation’s cyber resilience. Revealed at the UK National Cyber Security Centre’s (NCSC) annual CYBERUK conference on April 22, Dan Jarvis, the UK’s Minister for Security,… Read More "UK Commits £90m for Cybersecurity and Pushes for ‘Resilience Pledge’"
The UK National Cyber Security Centre (NCSC) has unveiled a new technology designed to protect video connections from cyber-attacks. The device, dubbed SilentGlass, was launched on April 22 at CYBERUK, the UK government’s flagship annual cybersecurity conference. SilentGlass is… Read More "NCSC Unveils SilentGlass Device to Protect Monitors from Cyber-Attacks"
A growing range of native macOS features are being repurposed by attackers to execute code, move laterally and evade detection, according to new research examining “living-off-the-land” (LOTL) techniques on Apple systems. The Cisco Talos threat research, published on 21 April, show… Read More "MacOS Native Tools Enable Stealthy Enterprise Attacks"
