Post-quantum website certificates from Cloudflare are scheduled for early 2027
Cloudflare plans to become a public certificate authority (CA), an organization that issues the digital certificates websites use to encrypt traffic and prov...
Articles mapped to MITRE ATT&CK techniques. Select a technique to view matching articles.
368 articles found
Cloudflare plans to become a public certificate authority (CA), an organization that issues the digital certificates websites use to encrypt traffic and prov...
The duo stole victims' employee email credentials through spamming and phishing campaigns.
Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of busines...
An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and J...
The hacking of internet-exposed, vulnerable Citrix NetScaler ADC and Gateway deployments has escalated. What started as stealthy targeting via zero-day explo...
Twelve years after launching Universal SSL, Cloudflare is applying to become a certificate authority. By combining an established root, an ACME-first approac...
Nearly three-quarters of security leaders have encountered or suspect a deepfake attack in the past year, while just 10% say their organizations have purpose...
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-d...
Twenty-minute training sessions that fit into the workweek could help new hires become productive sooner, keep employees’ skills current and build problem-so...
OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for an October launch, after i...
Infostealers are exposing corporate AI accounts, sessions and API keys, giving attackers access to sensitive data, compute and connected systems. SOCRadar an...
A routine package install can open the door to a cloud breach. Learn how attackers exploit developer credentials.
A quarter of victims of deepfake attacks have lost over $1m.
AI models taught to write like drunk people became easier to jailbreak and more likely to leak secrets shared in confidence. That is the finding of UNSW Sydn...
Infostealer malware is increasingly becoming the bridge between a compromised developer workstation and an enterprise cloud environment, with Lumma, RedLine,...
A newly observed MacSync campaign shows a marked evolution in macOS-focused crimeware, replacing relatively simple AppleScript-driven delivery with layered b...
It was meant to make life simpler: a secret email address to which developers can send a message and create an issue in their GitLab project. But poor securi...
Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised d...
A recent Verizon study found that vulnerability exploitation became the most common initial access vector, appearing in 31%…
SentinelOne has announced the expansion of Wayfinder Threat Hunting to the major public cloud services: AWS, Azure, and Google Cloud. It’s the latest offerin...