There is a large global market for low-cost Android devices. Bad actors are aware and are servicing the demand through devices built on MediaTek platforms – but with malware preinstalled in the device firmware. When the recipient of such an… Read More "Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries"
GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site’s .onion address using only public information, and then take that address over. Searchlight Cyber,… Read More "GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys"
When building an AI-native security program, start with outcomes
Detection engineering follows the same pattern. A rule that produced useful signals 18 months ago may generate mostly benign activity today. New attacker techniques may also create gaps that did not exist when the rule was written. Continuously evaluating detection… Read More "When building an AI-native security program, start with outcomes"
Eyes wide open: How to mitigate the security and privacy risks of smart glasses
Smart glasses allow anyone to track and record the world around them. That could put your data and the privacy of those nearby at risk. 11 May 2026 • , 5 min. read Fashion and many other trends have a… Read More "Eyes wide open: How to mitigate the security and privacy risks of smart glasses"
AI Training Critical as Governance Challenges Grow
AI is rapidly becoming embedded in enterprise operations, yet many organizations still lack the skills and governance frameworks needed to manage the technology effectively. In response, training and certification body ISACA plans to launch an AI governance certification, currently accepting… Read More "AI Training Critical as Governance Challenges Grow"
Deep Web vs Dark Web: What’s the Difference?
Most descriptions of the Internet contain three layers, or levels: the surface web, the deep web, and the dark web. These categorizations can be both useful and misleading. The words “deep” and “dark” carry connotations with them that often obscure… Read More "Deep Web vs Dark Web: What’s the Difference?"
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
Anthropic on Thursday announced two new cybersecurity initiatives: one gives open source maintainers faster access to AI-generated vulnerability reports, and the other targets companies that help secure operational technology (OT). The programs build on lessons from Project Glasswing. Anthropic said… Read More "Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security"
FrostyNeighbor: Fresh mischief and digital shenanigans
This blogpost covers newly discovered activities attributed to FrostyNeighbor, targeting governmental organizations in Ukraine. FrostyNeighbor has been running continual cyberoperations, changing and updating its toolset regularly, updating its compromise chain and methods to evade detection – targeting victims located in… Read More "FrostyNeighbor: Fresh mischief and digital shenanigans"
ShinyHunters Claims FBI Hack Via PeopleSoft Zero Day
The prolific hacking group ShinyHunters has claimed to have breached the FBI via a zero-day exploit and stolen data on “all FBI employees and applicants.” The group posted the news on its data leak site, reasoning it took action in… Read More "ShinyHunters Claims FBI Hack Via PeopleSoft Zero Day"
Best Data Breach and Data Leak Detection Tools in 2026
In 2023, a single-file-transfer vulnerability enabled attackers to access hundreds of organizations simultaneously. Not only did they steal data, they immediately posted it to dark web extortion sites before most victims even knew they’d been hit. It was the MOVEit… Read More "Best Data Breach and Data Leak Detection Tools in 2026"