Generative AI firm Anthropic said three Chinese AI companies have generated millions of queries with the Claude large language model (LLM) in order to copy the model – a technique called ‘model distillation attack.’ In a new blog published on… Read More "Chinese AI Firms Hit Claude with Distillation Attacks, Anthropic Warns"
AI is helping threat actors to accelerate attacks, but it can also empower incident responders to quickly contain threats, ReliaQuest has claimed in a new report. The firm’s Annual Cyber-Threat Report 2026 is based on an analysis of customer incidents. It… Read More "AI Accelerates Attacker Breakout Time to Just Four Minutes"
Der Blick auf eine High-Level-SSO-Architektur. Foto: Foundry / Matthew Tyson In jedem Fall erfordert Federated Identity Management eine zentrale Institution, die die gemeinsamen Anmeldeinformationen zwischen den verschiedenen Diensten vermittelt. Dabei kann es sich um einen Identity Manager handeln, der: von… Read More "Was ist Federated Identity Management?"
A new wave of cyber-attacks using Medusa ransomware has been linked to North Korean state-backed hackers, who continue to target the US healthcare sector despite recent indictments. Researchers from the Symantec and Carbon Black Threat Hunter Team said the attackers deployed… Read More "North Korean Lazarus Group Expands Ransomware Activity With Medusa"
A sophisticated phishing campaign impersonating cryptocurrency brokerage Bitpanda has been uncovered by cybersecurity researchers. The operation, detailed in a new advisory by the Cofense Phishing Defense Center, combines credential theft with extensive personal data harvesting, using a near-perfect replica of… Read More "Multifaceted Phishing Scheme Deceives Bitpanda Customers"
Employee negligence driven by shadow AI cost organizations more than any other type of insider risk last year, accounting for 53% of the $19.5m lost on average per business, according to DTEX. The security vendor’s Cost of Insider Risks 2026… Read More "Cost of Insider Incidents Surges 20% to Nearly $20m"
A Ghanaian national had pleaded guilty to scamming countless victims as part of a global fraud ring that engaged in romance fraud and business email compromise (BEC). The Justice Department announced the guilty plea for Derrick Van Yeboah, 40, late… Read More "Ghanaian Pleads Guilty to Role in $100m Romance Scam"
Millions of patients have had personal and health insurance information compromised after a breach at IT firm TriZetto Provider Solutions (TPS). A breach notification disclosure posted by the Office of the Maine Attorney General revealed that over 3.4 million individuals… Read More "TriZetto Provider Solutions Breach Hits 3.4 Million Patients"
US-based cybersecurity industry analyst firm IT-Harvest has announced the second cohort of its Cyber 150 awards – and 22% of winners are offering AI security products. Cyber 150 is IT-Harvest’s annual list of the fastest-growing mid-size cybersecurity companies worldwide. Introduced… Read More "AI Security Startups Dominate New Cyber Innovation Awards"
In a welcome relief for sysadmins, Microsoft released security updates for just 79 vulnerabilities in this month’s Patch Tuesday yesterday, including two publicly disclosed zero-days. Microsoft categorizes zero-day vulnerabilities as flaws which have either been exploited or disclosed without a… Read More "Microsoft Fixes Two Publicly Disclosed Zero-Days"
