Okta warns of vishing scheme that extorts data
Attackers pose as IT and tell employees to enroll an MS passkey, but the bad guys register their own key and take over the user.
SC Media
20 articles
Stop trying to 'lock down' your AI: Why rigid guardrails are a gift to hackers
Flexible governance, not restriction, of AI agents preserves productivity while providing oversight and accountability.
Regulatory frameworks are enablers, not burdens
When done correctly, regulations can help companies restore operations quickly and maintain trust after a breach.
‘GodDamn’ ransomware deploys PoisonX driver to kill EDR
GodDamn, a rebrand of Beast and Monster ransomware, leverages AnyDesk for remote access.
MSPs lead in AI security adoption over in-house teams, report finds
The Cynet Global AI Security Readiness Report, surveying 1,600 individuals across nine countries, reveals that MSPs demonstrate higher adoption rates of AI s...
Threat actor uses AI-generated malware in network intrusion
The AI-generated tool, titled "100% Working AD Information Gathering Script - FULLY FIXED," exhibited several hallmarks of LLM assistance, including a placeh...
Microsoft details GigaWiper destructive backdoor assembled from older tools
GigaWiper, written in Go, operates on Windows and presents operators with numbered commands, three of which are designed for system destruction.
Bitdefender launches program for EU data sovereignty and compliance
The Bitdefender Sovereignty Acceleration Program enables European organizations to transition to a cybersecurity ecosystem where customer data, security even...
QIZ Security raises $17 million for cryptographic management platform
QIZ Security has developed a platform designed to help organizations govern encryption across on-premises, cloud, and hybrid environments.
Aduna launches network-based authentication to replace SMS OTPs
The new system offers a single API integration across AT&T, T-Mobile US, and Verizon networks, aiming to eliminate the waiting times associated with SMS ...
EU moves closer to reviving CSAM scanning law after parliamentary vote
The European Parliament voted to send a bill that would give tech companies the legal right to scan for child sexual abuse material to EU member countries fo...
Permiso launches risk score engine for unified identity security
The Risk Score Engine generates three key outputs: Identity Risk Scores to rank the riskiest identities, Session Scores to flag immediate investigation needs...
Hong Kong SFC mandates stronger login security for crypto platforms
The SFC has mandated that all virtual asset trading platforms and internet brokers must replace one-time password (OTP) logins, including those sent via SMS ...
The Intercept warns of compromised Signal tipline username
An analysis by Dr. Martin Shelton of the Freedom of the Press Foundation suggests several ways the Signal username could have been compromised.
Mount Royal University hit by ransomware attack, data stolen and deleted
The cyberattack, claimed by the threat group CMD Organization, involved the theft of data from the university's "H drive," which contained information for cu...
Nextcloud exposes sensitive data due to hosting misconfiguration
The exposed data included employee emails, client company details, contracts, and scripts.
New Helix data extortion group uses identity-focused tactics to target SharePoint
Helix initiates contact through vishing, sometimes impersonating managers via caller ID spoofing, to trick targets into device-code phishing schemes for acco...
HalluSquatting: New AI attack method enables scalable botnets and large-scale infections
HalluSquatting, short for adversarial hallucination squatting, leverages the inability of LLMs to accurately distinguish between legitimate and fabricated re...
HP DeskJet 2800 series printers vulnerable to sensitive data exposure
AssuranceAmerica confirms data breach affecting 6.9 million driver's licenses
AssuranceAmerica discovered unauthorized access to its systems on March 17, concluding its investigation on June 15.