The watch’s insecurity and the spying it enabled might be expected given the gadget’s pedigree: It’s sold by an obscure company called CJC, costs less than $30, and was made by an equally obscure manufacturer, YiQingTeng Electronics, in Shenzhen, China.… Read More "Hackers Stalked Me by Hijacking a Smartwatch for Kids"
OpenAI’s Atlas web browser could have security protections bypassed and be tricked into spamming dozens of WhatsApp contacts or making unauthorized purchases on Amazon, according to new research presented today at the Black Hat cybersecurity conference in Las Vegas. The… Read More "OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts"
For years, North Korea’s stealthy hackers and scam IT workers have infiltrated companies, stealing corporate secrets and plundering billions in cryptocurrency to help fund the totalitarian regime and its weapons programs. Now, a security researcher who has spent almost two… Read More "A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide"
In a talk that was a last-minute addition to the Black Hat security conference in Las Vegas on Wednesday, employees from OpenAI presented new details about a recent, high-profile incident of rogue AI hacking that has created a maelstrom within… Read More "OpenAI Didn’t Notice Its AI Agents Using a Message Board to Plan Their Hacking Spree"
Agentic AI has permanently changed cybersecurity by making it quicker and easier to discover vulnerabilities in software and fix them—or develop so-called exploits to weaponize them. But longtime web security researcher James Kettle wanted to look beyond the bug-hunting apocalypse… Read More "The Most Dangerous AI Hacking Techniques Still Have Humans in the Loop"
It’s officially getting hard to keep track of all the times and ways AI models from OpenAI and Anthropic have been involved in “security incidents,” going outside the confines of their testing and interacting with the wider internet in unintended,… Read More "OK, Well, Rogue AI Agents Are Hacking Again"
Here is a detailed comparison of the four major cybersecurity certifications—CISSP, CISM, CISA, and Security+—designed to help you decide which path fits your career goals. Quick Comparison Table Feature Security+ (CompTIA) CISSP (ISC2) CISM (ISACA) CISA (ISACA) Best For… Beginners… Read More "Which certification to choose: CISSP, CISM, CISA or Security+?"
Any candidate preparing for cybersecurity or IT security exams will find that knowing about security program operations is important. This area discusses the how of implementation in this regard – where appropriate protective controls and processes are designed, implemented, monitored,… Read More "Overview of Security Program Operations"
Understanding Security Program Management is the essence for those who prepare for cybersecurity or IT security examinations. This discipline would involve a holistic means of managing an organization’s security efforts in that all aspects of risk management, governance, and compliance… Read More "What is Security Program Management?"
An organization is making the best possible efforts to not lose its data and fulfill all the regulations by developing a robust Information Security Program. As I delve more into the cybersecurity field, I found that becoming aware of what… Read More "Information Security Program for Cybersecurity Professionals"
