How come it’s still possible to ‘secure’ an online account with a six-digit string? 07 May 2026 • , 4 min. read The most-used password globally is exactly what you think it is: ‘123456.’ That’s according to NordPass’s latest annual… Read More "Fixing trivial passwords is as easy as 123456"
The Australian Cyber Security Centre (ACSC) has issued a warning about a malicious cyber campaign which exploits the ClickFix social engineering technique to deliver potent password-stealing malware. In the alert, issued on May 7, Australian Signals Directorate’s (ADC) ACSC warned… Read More "Australian Cyber Security Centre Issues Alert Over ClickFix Attacks"
Data leaks are a popular attack vector for cybercriminals. They’re considered a shortcut to accessing valuable sensitive data without needing to carry out sophisticated cyber attacks. Once an attacker discovers a data leak, they can exploit it immediately. Organizations must… Read More "9 Best Data Leak Detection Software Solutions in 2026"
There’s an app for everything nowadays… right? Well, looking up call records for a phone number of choice is not one of those things, as potentially millions of Android users found out after paying for app subscriptions promising just that.… Read More "How CallPhantom tricks Android users"
The vast majority (80%) of critical national infrastructure (CNI) providers in the UK face downtime costs of between £100,000 ($132,144) and £5m ($6.6m) from cyber-attacks that disrupt their operational technology (OT), according to e2e-assure. The SOC-as-a-service provider polled 250 cybersecurity… Read More "Most CNI Firms Face Up to £5m in Downtime from OT Attacks"
The SolarWinds supply chain attack highlighted how vulnerable supply chains are to cyberattacks. Supply chain risk mitigation has since become an essential component of risk management strategies and information security programs. To support the success of this effort, we’ve listed… Read More "The Biggest Security Risks in Your Supply Chain in 2026"
ESET’s Jake Moore used smart glasses, deepfakes and face swaps to ‘hack’ widely-used facial recognition systems – and he’ll demo it all at RSAC 2026 13 Mar 2026 • , 2 min. read Facial recognition is increasingly embedded in everything… Read More "What it takes to fool facial recognition"
Security researchers have warned of another step change in the velocity of ransomware, after spotting the Akira group complete all stages of an attack within an hour. Halcyon said in a new report that Akira usually achieves initial access by… Read More "Researchers Observe Sub-One-Hour Ransomware Attacks"
The National Institute of Standards and Technology (NIST) has issued special publications focused on improving Third-Party Risk Management (TPRM) and Supply Chain Risk Management (SCRM). The NIST Cyber Security Framework (NIST CSF) special publication has become a popular option for… Read More "Meeting the Third-Party Risk Requirements of NIST CSF in 2026"
Silver Fox is back in Japan, spoofing tax and HR emails timed to the one season when no one thinks twice about opening them 27 Mar 2026 • , 4 min. read Japan has entered its annual tax filing and… Read More "How Silver Fox preys on Japanese firms this tax season"
