Impersonation protection: How to protect your executives when the truth isn’t clear
How do you protect your executives when truth doesn’t seem to be truth anymore? It’s a question BlackCloak Founder and CEO Dr.
general
20 articles
Claude Global Outage Hits Users With “529 Overloaded” Error Messages
Users of Claude experienced service disruptions on Wednesday when Anthropic reported elevated error rates across all Claude models. This incident affected th...
Microsoft Word Copilot Flaw Lets Hidden Prompts Spread Self-Propagating AI Worms Across Documents
Security researcher Håkon Måløy has disclosed a cross-domain prompt injection vulnerability affecting Microsoft Copilot for Word. This vulnerability could al...
Hackers Can Compromise Tor Browser Users by Exploiting Firefox JIT Flaw
Tor Browser users on unpatched versions may be at risk of compromise simply by visiting a malicious webpage, following the disclosure of CVE-2026-10702, a se...
Product showcase: Dashlane Password Manager is more security toolkit than password vault
Dashlane is a password manager for individuals and families that stores passwords, passkeys, payment cards, personal information and secure notes in an encry...
Critical Rails Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code
A critical vulnerability in Ruby on Rails’ Active Storage component could allow unauthenticated attackers to read arbitrary files on vulnerable application s...
Exposed credentials are giving attackers a head start many organizations don’t see
Compromised credentials can remain active long after passwords are created, leaving organizations trying to identify exposed accounts before attackers can us...
Sweet Security introduces AI agent blocking to stop unauthorized actions in real-time
The Agentic AI Blocking capability addresses the risk of AI agents with autonomous capabilities operating within enterprise environments.
Fraud campaign impersonates Russian companies to steal funds
The attackers meticulously clone legitimate websites of Russian firms across various sectors, including manufacturing, logistics, and banking.
Maximum severity vulnerability in Ruflo AI platform allows memory tampering
Researchers from Noma Security discovered the flaw in Ruflo, formerly Claude Flow, which hosts AI agent swarms for Codex and Claude Code.
Flying Eagle Android RAT source code circulates on Telegram
The Flying Eagle framework is being distributed as a fake "公安一网通办" Public Security service application targeting Android users in China.
Health-ISAC warns of ShinyHunters' increasing attacks on healthcare SSO accounts
ShinyHunters primarily targets cloud SaaS and storage platforms through supply chain and identity attacks.
SplitVPN 'no logs' claim contradicted by massive data leak
The leaked database contains approximately 23.4 million user records, 13.
Navy advances network consolidation with new prototype project request
The goal of the 1/4 Initiative is to modernize and unify the Naval Surface Warfare Center Corona Division's IT and data architecture, transitioning from a fr...
Andrea Carcano returns as Nozomi Networks CEO
According to SDx Central, Andrea Carcano has returned to Nozomi Networks to assume the role of CEO, replacing Edgard Capdevielle.
LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach
LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people.
Spur Intelligence secures $200 million investment
Founded in 2017, Spur Intelligence provides real-time intelligence to help organizations identify anonymized, proxied, and obfuscated web traffic, thereby re...
Zscaler and Schwarz Digits partner for sovereign cloud security in Europe
The new service is designed to combat AI-driven cyber threats and enhance cyber resilience for organizations operating within the European Union.
Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email camp...
Smashing Security podcast #478: This job interview could destroy your company
You've been headhunted for a great job in cryptocurrency. All you have to do is complete a short online assessment - with your webcam on, of course, so they ...