security Beware the SparroWocky, my son! The backdoor that bites… READ MORE No content China’s Salt Typhoon gang has developed a new backdoor and dropped

security EXCLUSIVE City Relay says intruders accessed its Metabase Cloud instance twice and extracted customer data London property management biz City Relay has warned customers

security ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch Cisco admins who have spent their week

SECURITY Even a temporary staging server needs to be locked down. PWNED Welcome back to PWNED, the weekly column where we learn important life lessons

security Platforms comply just enough to avoid being blocked, leaving the regulator chasing debt Ofcom chiefs have acknowledged that most fines issued under the Online

ESET Research’s ongoing monitoring of FamousSparrow has borne fruit once again. Our previous public report on FamousSparrow revealed that this China-aligned APT group had developed

security This is a test – it is only a test The list of dodgy things AI agents can and will do on their own

security Agency’s shift from static CVSS scores to risk-based prioritization sends the old format packing September 28 If you rely on the Cybersecurity and Infrastructure

security CISA gives federal agencies just 3 days to patch Both Google and Uncle Sam warned that attackers have exploited a zero-day improper authorization bug

cyber-crime Data protection chiefs call for ‘immediate review’ of data protection models Spain’s data protection agency (AEPD) has reported the country’s first-ever personal data breach

Security Sensitive personal data was involved, but there is no evidence it was shared with third parties The Ministry of Justice (MoJ) has apologized after

The cyberthreat landscape has been evolving for years. But there’s a sense today that things are escalating more rapidly than before. That’s largely the result

Security Gartner sees huge amounts of technical debt paid down, and better scanning that could make software safer sooner When Microsoft delivered over 970 patches

Apple has addressed more than 260 CVEs across all of its operating systems, browsers, and other software products, marking the largest single patch cycle in

security Security firm Infoblox shines light on malicious infrastructure lurking beneath illegal gambling sites If your employees are visiting Chinese-language gambling or adult sites, they

security ‘Enemies of the regime’ on notice Iranian state cyber actors are targeting individuals using social messaging apps to deploy surveillance and data-stealing malware on

security Attackers already exploiting the critical flaw, and Cisco warns they may be able to cover their tracks once they’re in Criminals are exploiting a

Experienced IT leaders know that shadow IT is a persistent problem, but rapidly evolving AI and the proliferation of agents mean the potential threat –