Two thirds of organizations have suffered from a cybersecurity incident related to the deployment of AI agents during the last year, research by the Cloud Security Alliance (CSA) has warned. According to research, conducted alongside Token Security, unchecked AI agents… Read More "AI Agents Cause Cybersecurity Incidents at Two Thirds of Firms"
A cybersecurity report shouldn’t be feared. Instead, it should be regarded as an opportunity to demonstrate the effectiveness of your cybersecurity program, and while management is brimming with delight over your efforts, maybe also a chance to sneak in a… Read More "Creating a Cybersecurity Report for Senior Management in 2026"
If you use Google’s Chrome browser for desktop, there’s probably a Gemini Nano AI model running on your computer right now and taking up about 4 GB of space. That’s not necessarily a bad thing, but if you didn’t know… Read More "How to Disable Google’s Gemini in Chrome"
Threat actors are exploiting a vulnerability in shared content delivery network (CDN) infrastructure to hide connections to malicious domains. Dubbed Underminr, the issue is a variant of domain fronting, a now-mitigated type of attack that enabled threat actors to place… Read More "‘Underminr’ Vulnerability Lets Attackers Hide Malicious Connections Behind Trusted Domains"
Ravie LakshmananMay 23, 2026Supply Chain Attack / Malware Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang to deliver a comprehensive credential-stealing framework. The affected packages include – laravel-lang/lang… Read More "Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer"
In March 2024, an affiliate of the BlackCat ransomware gang took to a cybercrime forum with a complaint. They’d carried out the attack on Change Healthcare – one of the largest healthcare data breaches in U.S. history – but never… Read More "What the ransom note won’t say"
A rapidly expanding ransomware-as-a-service (RaaS) operation has claimed more than 320 victims, with the bulk of attacks occurring in early 2026. According to researchers at Check Point, the group, known as The Gentlemen, has gained traction among affiliates and is… Read More "The Gentlemen Ransomware Expands With Rapid Affiliate Growth"
![Biggest Data Breaches in France [Updated 2025]](https://i0.wp.com/cdn.prod.website-files.com/5efc3ccdb72aaa7480ec8179/6937d6e82c81757037ee13a2_25d2aa12.png?w=1140&resize=1140,855&ssl=1 "Biggest Data Breaches in France [Updated 2025]")
According to the latest cybersecurity report of CNIL, the French data protection supervisor, France has seen a record of personal data breaches in 2021 — a near 80% increase from 2020. The CNIL carried out strict regulatory measures on French… Read More "Biggest Data Breaches in France [Updated 2025]"
Ravie LakshmananMay 23, 2026Vulnerability / Web Security A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild. The flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an instance of incorrect privilege assignment… Read More "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root"
ESET researchers uncovered a multiplatform supply-chain attack by North Korea-aligned APT group ScarCruft, targeting the Yanbian region in China – home to ethnic Koreans and a crossing point for North Korean refugees and defectors. In the attack, probably ongoing since… Read More "ScarCruft compromises gaming platform in a supply-chain attack"
