Security researchers observed a 30% annual increase in ransomware victims listed on extortion sites last year, with AI helping to lower the barrier to entry for new threat groups. Searchlight Cyber’s new report, Ransomware’s Record Year: Tracking a Volatile Landscape in… Read More "Record Number of Ransomware Victims and Groups in 2025"
The US government warned this week that Iran-linked hackers have targeted critical infrastructure organizations, hacking industrial control systems (ICS) and other operational technology (OT). According to an advisory written by CISA, the FBI, and several other agencies, hackers have targeted… Read More "Industry Reactions to Iran Hacking ICS in Critical Infrastructure: Feedback Friday"
When Geopolitical Conflict Spills into Cyberspace — How US Organizations Should Respond The 2026 Iran-US-Israel escalation shows how cyber warfare attacks are reshaping conflict, merging cyber warfare attacks with kinetic operations AI. Modern conflict no longer begins with troops crossing… Read More "Hybrid Conflict & Global Cyber Risk"
While much of the discussion on AI security centers around protecting ‘shadow’ AI and GenAI consumption, there’s a wide-open window nobody’s guarding: AI browser extensions. A new report from LayerX exposes just how deep this blind spot goes, and why AI extensions may be the… Read More "Browser Extensions Are the New AI Consumption Channel That No One Is Talking About"
The flaw is tracked as CVE-2026-34197 and carries a high severity rating (CVSS 8.8). It affects ActiveMQ Classic versions prior to 5.19.4 and several 6.x releases. While, by definition, the exploit requires authentication, Sunkavally pointed out that default credentials like… Read More "Claude uncovers a 13‑year‑old ActiveMQ RCE bug within minutes"
AI assistants with web browsing features can be repurposed as covert command-and-control (C2) channels, allowing malicious traffic to blend into routine enterprise communications. According to new findings from Check Point Research (CPR), platforms including Grok and Microsoft Copilot can be… Read More "AI Assistants Used as Covert Command-and-Control Relays"
Google announced this week the first stable version of Chrome 147, which includes patches for 60 vulnerabilities, including two that have been rated critical. The critical vulnerabilities both impact Chrome’s WebML component, which is designed for running machine learning models… Read More "Chrome 147 Patches 60 Vulnerabilities, Including Two Critical Flaws Worth $86,000"
What is often overlooked is how traffic enters and moves through the environment before those controls are applied. The traffic layer includes ingress paths, load balancers, API gateways, TLS enforcement, request validation, and service-to-service communication. This is where trust is… Read More "Why most zero-trust architectures fail at the traffic layer"
A newly identified cryptojacking campaign that spreads through pirated software installers has been uncovered by researchers, revealing a multi-stage infection chain designed for persistence, stealth and maximum cryptocurrency mining output. The operation, discovered by security firm Trellix, centres on a… Read More "Cryptojacking Campaign Exploits Driver to Boost Monero Mining"
The non-profit MITRE Corporation on Thursday released a new framework to help organizations fight fraudsters. MITRE’s Fight Fraud Framework (MITRE F3) is a curated knowledge base that provides a behavior-based model of the tactics, techniques, and procedures (TTPs) fraudsters employ,… Read More "MITRE Releases Fight Fraud Framework"
