17 Jun

Sitecore CMS flaw let attackers brute-force ‘b’ for backdoor

Security researchers have issued a warning about a pre-authentication exploit chain affecting a CMS used by some of the biggest companies in the world. Sitecore

Author rabih
17 Jun

Redefining identity security in the age of agentic AI

Partner content The rise of agentic AI systems is rewriting the rules of cybersecurity. Unlike generative AI, which relies on predefined instructions or prompts, AI

Author rabih
17 Jun

23andMe hit with £2.3M fine after exposing genetic data of millions

The UK’s data watchdog is fining beleaguered DNA testing outfit 23andMe £2.31 million ($3.13 million) over its 2023 mega breach. Among the various security failings

Author rabih
16 Jun

Scattered Spider has moved from retail to insurance

Cyber-crime crew Scattered Spider has infected US insurance companies following a series of ransomware attacks against American and British retailers, according to Google, which urged

Author rabih
16 Jun

Remorseless extortionists claim to have stolen thousands of files from Freedman HealthCare

An extortion gang claims to have breached Freedman HealthCare, a data and analytics firm whose customers include state agencies, health providers, and insurance companies, and

Author rabih
16 Jun

Canada’s WestJet says ‘expect interruptions’ online as it navigates cybersecurity turbulence

Canadian airline WestJet is warning of “intermittent interruptions or errors” on its app and website as it investigates a cybersecurity incident. The airline first became

Author rabih
16 Jun

Eurocops arrest suspected Archetyp admin, shut down mega dark web drug shop

Operation Deep Sentinel is the latest international law enforcement collaboration against cybercrime, shutting down Archetyp – one of the largest dark web drug marketplaces. Launched

Author rabih
16 Jun

Salesforce study finds LLM agents flunk CRM and confidentiality tests

A new benchmark developed by academics shows that LLM-based AI agents perform below par on standard CRM tests and fail to understand the need for

Author rabih
16 Jun

Microsoft adds export option to Windows Recall in Europe

Windows 11 users in the European Economic Area will shortly receive a new Recall Export feature, allowing Recall snapshots to be shared with third-party apps

Author rabih
16 Jun

Spy school dropout: GCHQ intern jailed for swiping classified data

A former GCHQ intern was jailed for seven-and-a-half years for stealing top-secret files during a year-long placement at the British intelligence agency. Hasaan Arshad, now

Author rabih
16 Jun

How collaborative security can build you a better business

Sponsored Post Here’s a sobering reality: 95% of data breaches involve human error. So, why do most organizations still throw technology at a fundamentally human

Author rabih
16 Jun

Armored cash transport trucks allegedly hauled money for $190 million crypto-laundering scheme

Asia In Brief Australia’s Federal Police (AFP) last week announced charges against four suspects for alleged participation in a money-laundering scheme that involved a security

Author rabih
15 Jun

Dems demand audit of CVE program as Federal funding remains uncertain

Infosec In Brief A pair of Congressional Democrats have demanded a review of the Common Vulnerabilities and Exposures (CVE) program amid uncertainties about continued US

Author rabih
13 Jun

Cyber weapons in the Israel-Iran conflict may hit the US

The current Israel–Iran military conflict is taking place in the era of hybrid war, where cyberattacks amplify and assist missiles and troops, and is being

Author rabih
13 Jun

Do you trust Xi with your ‘private’ browsing data? Apple, Google stores still offer China-based VPNs, report says

Both Apple’s and Google’s online stores offer free virtual private network (VPN) apps owned by Chinese companies, according to researchers at the Tech Transparency Project,

Author rabih
13 Jun

Apple fixes zero-click exploit underpinning Paragon spyware attacks

Apple has updated its iOS/iPadOS 18.3.1 documentation, confirming it introduced fixes for the zero-click vulnerability used to infect journalists with Paragon’s Graphite spyware. The infections

Author rabih
13 Jun

Wanted: Junior cybersecurity staff with 10 years’ experience and a PhD

Cybersecurity hiring managers need a reality check when it comes to hiring junior staff, with job adverts littered with unfair expectations that are hampering recruitment

Author rabih
13 Jun

Slapped wrists for Financial Conduct Authority staff who emailed work data home

Four staffers at the UK’s Financial Conduct Authority (FCA) were let off with warnings over separate cases involving the transmission of regulator data to their

Author rabih
Load moreLoadingAll items loaded