Fabricated machine identities pose overlooked security risk
The Hacker News disclosed that a significant and often overlooked security threat involves fabricated machine identities, a concept analogous to synthetic id...
general
20 articles
Millions of vehicles vulnerable to Bluetooth car theft attacks
Millions of vehicles equipped with dealer-installed KARR and SWDS security systems are susceptible to Bluetooth-based attacks that could allow unauthorized a...
End-to-end encryption and the third round of the ‘going dark’ debate
A new paper analyzes the current controversies over end-to-end encryption (E2EE), which governments worldwide are seeking to limit for law enforcement and na...
How to Evaluate Attack Surface Management Platforms
The governance chain evaluation framework tests whether a platform can enforce the workflows that turn discovery into governance
Indicators of Compromise (IOCs) vs Indicators of Attack (IOAs)
Each signal type drives different control decisions
Nation-State Threat Actors Explained
Understanding what defines a nation-state actor — and what does not — changes how defenders evaluate threat intelligence relevance
Identity Protocols Were Not Built for AI Agents
Non-human identities break protocol assumptions
New Dolphin X malware uses AI to rank high-value targets
A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cybercriminals identify which vi...
How to Evaluate Enterprise AI Security and Governance Platforms
Can your existing security tools cover AI-specific risks or do you need to deploy a purpose-built AI governance platform?
Fixing Vulns Is Harder Than Finding Them - PSW #936
Secrets, Certificates, and Key Management for Identity Teams
Microservices authentication represents the most common deployment
Don't break in, log in: How abuse of trust leads to system compromise
Today's attackers win not by defeating security controls, but by exploiting the trust we place in legitimate technologies.
Australian energy provider Origin says data breach exposes client data
Origin Energy has confirmed that an unauthorized party accessed and subsequently leaked customer data online, exposing sensitive personally identifiable info...
Rubio restricts visas for sextortionists, cyber scammers
The move stems from a Trump executive order as the administration continues to pursue cyber-enabled fraud and other crimes. The post Rubio restricts visas fo...
U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog
U.S.
Fake Claude app promoted by Bing ads pushes SectopRAT malware
A malvertising campaign on the Bing search service is pushing a fake Claude desktop app installer hosted on a legitimate Claude.ai domain to deliver the Sect...
What Is Network Security?
Network security is the practice of protecting the communication paths that connect devices, applications, and data
Top 10 Best Physical Security Penetration Testing Firms 2026
In an era dominated by cyber threats, the importance of physical security penetration testing often gets overshadowed. However, a robust security posture req...
Zero Trust Architecture: Identity as the Security Perimeter
ZTA requires continuous verification of user and device identity before granting access to specific resources
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra's webmail client. The payload goes aft...