Category: News

A new variant of the NGate malware family has been identified, leveraging a trojanized Android application to capture payment card data and PINs. According to research published by ESET on April 21, the new campaign has replaced earlier tooling with a modified version… Read More "Trojanized Android App Fuels New Wave of NFC Fraud"

Data breaches in the Healthcare sector are on an upward trend. The best chance for inverting this trend is for the healthcare sector to implement a cyber risk management program that can keep up with the rate at which cyber… Read More "Choosing a Healthcare Cyber Risk Remediation Product in 2026"

Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and personal data 22 May 2026  •  , 5 min. read As the FIFA World Cup 2026™ in the United States, Canada, and… Read More "Scams target soccer fans with fake World Cup tickets, merchandise"

Low-skilled threat actors are abusing legitimate generative AI (Gen AI) platforms in growing numbers to create highly convincing phishing campaigns, Cofense has warned. The security vendor said that it has observed a number of campaigns based around v0[.]dev, a powerful GenAI… Read More "Researchers Spot Uptick in Use of Vercel for Phishing Campaigns"

The Office of the Comptroller of the Currency (OCC) has outlined its third-party risk management requirements for United States national banks and federal savings associations in the OCC Bulletin 2013-29. These risk management standards don’t only apply to third-party vendor… Read More "Meeting OCC Third-Party Risk Requirements [2026 Edition]"

The developer of a popular utility software application has been forced to release a new version after confirming reports that threat actors managed to hide malware in a previous iteration. Disc Soft said it released the malware-free Version 12.6 of its Daemon… Read More "Daemon Tools Developer Confirms Software Was Trojanized"

How many tools does it take to get a clear picture of your organization’s cybersecurity risk? You’ve probably asked yourself a similar question recently. The answer for most of us is a resounding “too many.” It’s a familiar feeling. Your… Read More "Compounding Intelligence: UpGuard’s GRID and 1+1>2 Approach"

A fraudulent imitation of Anthropic’s Claude website has been used to distribute a previously undocumented backdoor named Beagle, deployed through a Dynamic Link Library (DLL) sideloading chain that abuses a signed antivirus updater binary. The malicious domain claude-pro[.]com presents a stripped-down… Read More "Fake Claude AI Site Drops Beagle Backdoor on Windows Users"

If 2025 has taught us anything, it’s that risk is no longer confined to the edges of your network. The traditional security perimeter has dissolved, with risk creeping into the very tools we use to run our businesses.  Organizations faced… Read More "Top 10 Security Events of 2025"

Commercial large language models (LLMs) were used as part of a cyber-attack which targeted a municipal water and drainage utility provider in Mexico, cybersecurity researchers at Dragos have warned. A “significant compromise” of the water infrastructure providers’ IT environment escalated… Read More "OpenAI and Anthropic LLMs Used in Critical Infrastructure Cyber-Attack"