The US Justice Department has announced the arrest and extradition of a teenager accused of various hacking-related offenses as part of the infamous Scattered Spider group. Peter Stokes, 19, is a dual US and Estonian citizen but was arrested in… Read More "Alleged Scattered Spider Member Extradited to US"
This year, AI agents took the center stage – as a defensive capability, but more pressingly as a risk many organizations haven’t caught up with 27 Mar 2026 That’s a wrap on the RSAC™ 2026 Conference. For its 35th edition,… Read More "RSAC 2026 wrap-up – Week in security with Tony Anscombe"
Secure-by-design systems, segmented networks, and logging and monitoring are among the best ways to defeat cyber adversaries, according to penetration testers. That is according to the National Cyber Security Centre (NCSC), which explained in a blog post published on July 1,… Read More "NCSC Shares Tips on How to Make a Pen Tester’s Job Harder"
The past four weeks have seen a slew of new cybersecurity wake-up calls that showed why every organization needs a well-thought-out cyber-resilience plan 31 Mar 2026 As March 2026 draws to a close, ESET Chief Security Evangelist Tony Anscombe looks… Read More "This month in security with Tony Anscombe – March 2026 edition"
Cybercriminals are posing as international law enforcement agencies in a phishing campaign designed to deliver ransomware attacks. As detailed by Bitdefender Antispam Lab in a blog post published on July 1, the phishing attacks target small businesses across Europe, Asia, the… Read More "Criminals Pose as Interpol in Phishing Emails to Deliver Ransomware"
A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages 15 Jun 2026 • , 5 min. read Much has been written about how the days of phishing emails… Read More "EvilTokens: A phishing attack that doesn’t steal your password"
A pseudonymous security researcher has released over 30 proof-of-concept exploits for zero-day vulnerabilities in open-source projects without disclosing them to the maintainers first. The dump, called ‘Exploitarium,’ was shared publicly on GitHub by an individual going by name ‘bikini’ and… Read More "Researcher Explains Release of Undisclosed Zero-Day Exploits"
Traditional castle-and-moat network security assumed that everything inside a corporate network perimeter was inherently trustworthy. Modern hybrid environments, remote workforces, and multi-cloud infrastructure have rendered this static perimeter model obsolete. Attackers who gain access through a single compromised credential or… Read More "Zero Trust Security Architecture: CISSP & Enterprise Defense"
You know that stomach-dropping feeling when you realize you just deleted the wrong file? Or when your hard drive makes that ominous clicking sound and suddenly everything goes dark? That’s where backup and recovery come in. They’re not just buzzwords… Read More "Backup and Recovery: What Every Security Professional Needs to Know"
You can invest in strong security tools and still end up with a costly breach because one employee clicked the wrong link. That is why cybersecurity awareness matters. It is not about turning every employee into a security specialist. It… Read More "How to Educate Employees on Cybersecurity Awareness"
