Compliance automation collapsed the SOC 2 timeline from consulting-year to integration-quarter: connectors pull evidence from your cloud, HR, and device…
Tag: EN
Google dismantles botnet secretly running on 1.3 million Android TV boxes
Google has cut ties with the company behind the botnet campaign.
Europol dismantles investment scheme that impacted potential victims in 50 countries
Authorities seized more than 100 servers and searched locations linked to the alleged operation across 17 countries.
U.S. Charges Canadian Man in Alleged Hack of University Supercomputers
A Canadian man was extradited to the U.S. to face charges over hacking universities and hijacking their computers to mine cryptocurrency. A Canadian man,…
DigiCert Confirms Data Breach Exposing Customer Details and Sensitive Identity Documents
DigiCert has confirmed a data breach involving an internal business system that stored customer contact details and identity documents. Unauthorized…
European authorities probe ongoing attacks targeting grocery refrigerators
U.S. military investigators have been working with French agencies after hacks hit domestic bases.
Password manager mSecure tells users to change passwords, won’t say why
Customers left wondering what’s been compromised after vendor advises resetting passwords, 2FA and passkeys
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world’s largest cryptocurrency exchange was the culmination of a…
AI agent detection signals that still work when agents look human
Bots follow a script. AI agents work toward a goal and choose their own steps, which makes them harder to catch. In this Help Net Security interview,…
Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions
Synology warns of ransomware attacks exploiting a 2024 flaw in outdated NAS devices, urging users to update DSM immediately. A security fix released in…
AI threats create urgent need to renew cybersecurity information-sharing law, businesses tell Congress
Leading infrastructure-operator associations want lawmakers to renew the program for another 10 years.
Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization…
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating…
Q&A With Pierre-Loic Kuhn at Filigran: Why Cybersecurity Needs to Evolve
For years, cybersecurity teams have relied on vulnerability scanning and periodic penetration testing to identify weaknesses before attackers can exploit…
European Supermarket Freezers Set to 122°F in Suspected Hacks
Suspected cyberattacks disrupted refrigeration across seven European countries. Learn how stores were affected and what EMEA retailers should do next.
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
UEFI bootkit BlackX exploits Microsoft’s lack of clarity around Secure Boot protections.
3AM Ransomware Hits 37 UK School Systems in Suspected AI-Assisted Attack
Bitdefender details a 3AM ransomware attack on a UK school estate that encrypted 37 systems, with command timing suggesting possible AI-assisted…
DreamHost Confirms Data Breach After Hackers Steal FTP/SFTP Credentials and Access Customer Emails
DreamHost has confirmed a security breach involving its browser-based File Manager, which exposed FTP/SFTP usernames and passwords, as well as the…
Subnet Solutions PowerSYSTEM Center
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to…
Healthcare can’t govern the AI tools it hasn’t found yet
Nearly nine in ten healthcare leaders say security or compliance staff always or usually review AI-written code that touches patient data before it goes…