While AI continues to dominate the cybersecurity landscape, several other technologies and threat vectors are quietly gaining traction in the background and are expected to affect cybersecurity by 2030, says the report. These include autonomous systems and robotics, quantum technologies,… Read More "Cybersecurity risk will accelerate this year, fueled in part by AI, says World Economic Forum"
Sarika Sharma Sarika, a cybersecurity enthusiast, contributes insightful articles to Fidelis Security, guiding readers through the complexities of digital security with clarity and passion. Beyond her writing, she actively engages in the cybersecurity community, staying informed about emerging trends and… Read More "CNAPP Integrations for Multi-Cloud Security"
Jan 13, 2026Ravie Lakshmanan Web Security / Data Theft Cybersecurity researchers have discovered a major web skimming campaign that has been active since January 2022, targeting several major payment networks like American Express, Diners Club, Discover, JCB Co., Ltd., Mastercard,… Read More "Long-Running Web Skimming Campaign Steals Credit Cards From Online Checkout Pages"
A new Linux malware framework linked to Chinese-affiliated actors has been discovered by security researchers at Check Point Research. This highly modular framework, named VoidLink by its developers, includes over 30 plugins, cloud and container persistence capabilities and robust operational… Read More "New Chinese-Made Malware Framework Targets Linux Cloud Environments"
Scope Covers one layer (e.g., config or workload) Covers posture, identity, data, SaaS, workload, and runtime Visibility Partial asset visibility Complete multi-cloud and hybrid visibility Prioritization Lists issues Shows business-impacting risks first Response Manual investigation Automated correlation and remediation Identity… Read More "The Best Enterprise Cloud Security Solutions to Consider in 2026"
Jan 13, 2026Ravie LakshmananWeb Security / Online Fraud Cybersecurity researchers have disclosed details of a malicious Google Chrome extension that’s capable of stealing API keys associated with MEXC, a centralized cryptocurrency exchange (CEX) available in over 170 countries, while masquerading… Read More "Malicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading Tool"
A high-severity security flaw affecting the self-hosted Git service Gogs is being actively exploited, prompting a warning from the US Cybersecurity and Infrastructure Security Agency (CISA). The issue has now been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog, signaling… Read More "CISA Flags Actively Exploited Gogs Vulnerability With No Patch"
More than two dozen Immigration and Customs Enforcement vehicles on the ground in the Minneapolis-St. Paul area “currently lack the necessary emergency lights and sirens” required to be “compliant with law enforcement requirements,” according to a contract justification published in… Read More "Dozens of ICE Vehicles in Minnesota Lack ‘Necessary’ Lights and Sirens"
Jan 13, 2026Ravie LakshmananVulnerability / SaaS Security ServiceNow has disclosed details of a now-patched critical security flaw impacting its ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform arbitrary actions as that user. The… Read More "ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation"
A multi-stage Windows malware campaign, tracked as SHADOW#REACTOR, has been analyzed by cybersecurity researchers, revealing a complex infection chain designed to stealthily deploy the Remcos remote access Trojan. The campaign, discovered by the Securonix Threat Research team, relies on a… Read More "SHADOW#REACTOR Campaign Uses Text-Only Staging to Deploy Remcos RAT"
