27 Aug

Who are you again? Infosec experiencing ‘Identity crisis’ amid rising login attacks

Infosec pros are losing confidence in their identity providers’ ability to keep attackers out, with Cisco-owned Duo warning that the industry is facing what it

Author rabih
27 Aug

Don’t let “back to school” become “back to (cyber)bullying”

Kids Online Cyberbullying is a fact of life in our digital-centric society, but there are ways to push back Phil Muncaster 27 Aug 2025  • 

Author rabih
27 Aug

BGP’s security problems are notorious. Attempts to fix that are a work in progress

Systems Approach I’ve been working on a chapter about infrastructure security for our network security book. The core of the Internet is notoriously vulnerable to

Author rabih
27 Aug

Google issued ‘State-backed attack in progress’ warnings after spotting web hijack scheme

Google has warned customers of a suspected state-backed attack after observing a web traffic hijacking campaign. As explained in a Monday post by Google Threat

Author rabih
26 Aug

First known AI-powered ransomware uncovered by ESET Research

ESET Research The discovery of PromptLock shows how malicious use of AI models could supercharge ransomware and other threats 26 Aug 2025  •  , 2

Author rabih
26 Aug

First AI-powered ransomware spotted, but it’s not active – yet

ESET malware researchers Anton Cherepanov and Peter Strycek have discovered what they describe as the “first known AI-powered ransomware,” which they named PromptLock.  The good

Author rabih
26 Aug

Azure apparatchik shows custom silicon keeping everything locked down

Hot Chips Microsoft is one of the biggest names in cybersecurity, but it has a less-than-stellar track record in the department. Given its reputation, Redmond

Author rabih
26 Aug

DOGE accused of duplicating critical Social Security database on unsecured cloud

A Social Security Administration employee has filed a whistleblower complaint alleging that Donald Trump’s DOGE cost-cutting unit has put the records of every single American

Author rabih
26 Aug

ZipLine attack uses ‘Contact Us’ forms, White House butler pic to invade sensitive industries

Cybercriminals are targeting critical US manufacturers and supply-chain companies, looking to steal sensitive IP and other data while deploying ransomware. Their attack involves a novel

Author rabih
26 Aug

Citrix patches trio of NetScaler bugs – after attackers beat them to it

Citrix has pushed out fixes for three fresh NetScaler holes – and yes, they’ve already been used in the wild before the vendor got around

Author rabih
26 Aug

Crypto thief earns additional prison time for assaulting witness

A violent home invader and gunpoint cryptocurrency thief will now spend more than 50 years behind bars after being found guilty of assaulting a witness.

Author rabih
26 Aug

Farmers Insurance harvests bad news: 1.1M customers snared in data breach

US insurance giant Farmers Insurance says more than a million customers had personal data nicked after a third-party vendor was compromised. The insurer, which sells

Author rabih
26 Aug

Malware-ridden apps made it into Google’s Play Store, scored 19 million downloads

Cloud security vendor Zscaler says customers of Google’s Play Store have downloaded more than 19 million instances of malware-laden apps that evaded the web giant’s

Author rabih
25 Aug

Australian university used Wi-Fi location data to identify student protestors

Asia In Brief Australia’s University of Melbourne last year used Wi-Fi location data to identify student protestors. The University used Wi-Fi to identify students who

Author rabih
25 Aug

AWS, Cloudflare, Digital Ocean, and Google helped Feds investigate alleged Rapper Bot DDoS perp

Infosec in brief PLUS The US Department of Justice has thanked Akamai, Amazon Web Services, Cloudflare, Digital Ocean, Flashpoint, Google, PayPal, and Unit 221B for

Author rabih
24 Aug

Bug bounties: The good, the bad, and the frankly ridiculous ways to do it

feature Thirty years ago, Netscape kicked off the first commercial bug bounty program. Since then, companies large and small have bought into the idea, with

Author rabih
22 Aug

Short circuit: Electronics supplier to tech giants suffers ransomware shutdown

Data I/O, a major electronics manufacturer whose customers include Amazon, Apple, Google, and Microsoft, notified federal regulators that it fell victim to a ransomware infection

Author rabih
22 Aug

Kidney dialysis giant DaVita tells 2.4M people they were snared in ransomware data theft nightmare

Ransomware scum breached kidney dialysis firm Davita’s labs database in April and stole about 2.4 million people’s personal and health-related information. In a filing with

Author rabih
Load moreLoadingAll items loaded