From unintentional data leakage to buggy code, here’s why you should care about unsanctioned AI use in your company 11 Nov 2025 • , 5 min. read Shadow IT has long been a thorn in the side of corporate security… Read More "Why shadow AI could be your biggest security blind spot"
A malware campaign which targets macOS systems, distributed using a ClickFix attack, has evolved to exploit Script Editor as the execution vector rather than the typical Terminal-based point of execution. Identified by researchers at Jamf Threat Labs, the campaign is… Read More "Atomic Stealer MacOS ClickFix Attack Bypasses Apple Security Warnings"
Palo Alto Networks and SonicWall have separately announced patches for multiple vulnerabilities across their products, including two high-severity bugs. Palo Alto Networks patched three flaws and rolled out third-party fixes for Cortex platforms, ADEM for Windows, PAN-OS, and products using… Read More "Palo Alto Networks, SonicWall Patch High-Severity Vulnerabilities"
Look no further to learn how cybercriminals could try to crack your vault and how you can keep your logins safe 13 Nov 2025 • , 5 min. read The average internet user has an estimated 168 passwords for their… Read More "Can password managers get hacked? Here’s what to know"
The SANS Institute has warned that the race to incorporate AI into enterprise workflows threatens to outpace security efforts, after revealing widespread credential hygiene failings. The security training and research organization presented the findings as part of its 2026 SANS… Read More "Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs"
Federal campaign and political action committee spending on security during the 2024 election cycle was over five times the amount spent ahead of the 2016 election, according to a new report published on Thursday. The report by the Security Project… Read More "Politicians Are Spending More Money on Security as They Increasingly Become Targets"
A financially motivated threat actor is targeting business process outsourcing (BPO) organizations to steal data pertaining to high-value companies, Google Threat Intelligence Group (GTIG) warns. Tracked as UNC6783, the threat actor is potentially linked to a certain ‘Raccoon’ persona, used… Read More "Google Warns of New Campaign Targeting BPOs to Steal Corporate Data"
Vulnerabilities in OpenClaw, FreeBSD, F5 BIG-IP, and industrial control systems show risks growing across enterprise and critical infrastructure environments. Cyble Research & Intelligence Labs (CRIL) weekly vulnerability report tracked 1,960 vulnerabilities last week, reflecting a continued surge in vulnerability disclosures… Read More "OpenClaw, F5 BIG-IP & ICS Flaws"
Online disagreements among young people can easily spiral out of control. Parents need to understand what’s at stake. 27 Nov 2025 • , 5 min. read The digital world offers countless opportunities for self-expression, learning and personal development, but it’s… Read More "What parents should know to protect their children from doxxing"
A new threat group is targeting business process outsourcers (BPOs) and large enterprises for extortion using live chat channels, Google has warned. Google Threat Intelligence Group (GTIG) principal threat analyst, Austin Larsen, said UNC6783 is a financially motivated threat cluster… Read More "Google Warns of New Threat Group Targeting BPOs and Helpdesks"
