Most Organizations Skip Permissions Reviews Before Deploying AI Tools
A new Syskit study has shown that only 43% of organizations with AI agents deployed in Microsoft 365 environments completed a permission review before doing so
general
20 articles
New IoT Malware Uses Public Linux Exploits to Gain Root and Launch DDoS Attacks
A newly observed IoT malware family dubbed KATARU targets internet-exposed devices through Telnet credential brute-forcing, then attempts to gain root privil...
Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion
Anthropic reveals how criminal groups are increasingly targeting AI vendors' own infrastructure, including to steal a pre-release Claude model. The post Anth...
IDScan confirms breach after 153 million driver’s licenses leak on dark web
Days after reports linked IDScan to a dark web database holding more than 153 million driver’s license scans, the identity verification company has confirmed...
PaperCut Flaws Exploited in AI-Powered Attacks
A Russian threat actor used AI to build, test, and deploy exploits against hundreds of organizations worldwide. The post PaperCut Flaws Exploited in AI-Power...
Kiteworks expands runtime data governance with Bonfy.AI acquisition
Kiteworks has acquired Bonfy.AI, extending runtime data governance across its control plane.
Trezor: 347,000 users targeted in phishing attacks after Brevo breach
Trezor has revealed that phishing attacks against its customers earlier this week targeted 347,000 email addresses and affected 2,500 users who clicked an em...
Automox Mitigation Worklets cut endpoint exposure to unpatchable flaws
Automox has announced its AI-speed Mitigation Worklet Pipeline, which automates mitigation to reduce risk from the increased volume and velocity of frontier-...
CISA Urges Service Providers to Provide Transparent Updates During Major IT and OT Outages
The U.S.
Hackers Use AI-Assisted CEO Emails to Trick Finance Teams Into Sending $50,000 Payments.
Threat actors are using AI-assisted phishing templates, executive impersonation, fake ServiceNow invoices, and fabricated email threads to pressure finance t...
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted s...
12 Best Server Security Solutions Compared (2026): Features & Pricing
Quick Answer: CrowdStrike and SentinelOne lead server EDR; Trend Micro Deep Security owns virtual patching for unpatchable estates; Microsoft Defender for Se...
12 Best Ransomware Protection Solutions Compared (2026): Features & Pricing
Quick Answer: No single product stops ransomware. The strongest stacks combine EDR prevention (CrowdStrike, SentinelOne, Microsoft Defender, Sophos, Bitdefen...
China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to install a...
Mantax OTAX Android Ransomware Spies on Users, Steals OTPs and Encrypts Files
Mantax OTAX is aggressive Android malware family combines ransomware, spyware, credential theft, and remote device-control features in a single infection cha...
12 Best Endpoint Encryption Software Compared (2026): Features & Pricing
Quick Answer: The encryption itself is free BitLocker (Windows) and VeraCrypt (open-source) are strong. What you pay for is management: Sophos Central manage...
UK Council Attack Linked to Mass Exploitation of SonicWall Flaw
A critical SonicWall flaw was rapidly weaponized, with a UK Council attack linked to a campaign that exposed credentials and enabled Active Directory theft. ...
11 Best Device Control & USB Security Tools Compared (2026): Features & Pricing
Quick Answer: CoSoSys Endpoint Protector leads cross-platform (Windows/macOS/Linux) device control; Safetica and ManageEngine win mid-market value; Symantec ...
12 Best Endpoint Privilege Management (EPM) Tools Compared (2026): Features & Pricing
Quick Answer: CyberArk and BeyondTrust lead enterprise EPM; Delinea balances depth with usability; Admin By Request and CyberFOX AutoElevate make local-admin...
Conti ransomware gang member sentenced to 4 years in prison
A Ukrainian national has been sentenced to four years in prison for his role in Conti ransomware attacks between 2021 and 2022. [.