FCC approves new cybersecurity rules for emergency alerts and undersea cables
The new regulations aim to protect the Emergency Alert System (EAS) and Wireless Emergency Alerts (WEA) from hijacking attacks.
SC Media
20 articles
How to stop treating OEM software like a security liability
Don’t wait until a breach forces the company to adapt.
New ‘Blacksite’ phishing kit bundles AiTM with scanner evasion
The kit includes Cloaked.gg, which displays benign sites to detected scanners and sandboxes.
Microsoft extends free Windows 10 security updates for consumers
The extension provides users with more time to transition to a new Windows 11 PC while continuing to receive critical security updates.
Model Context Protocol overhaul introduces new security challenges for developers
The MCP 2026-07-28 specification removes protocol-level security risks found in earlier versions, such as stateful initialization and server-initiated prompt...
Cloud Visibility, Fortibleed, hacking things the easy way - Sandy Bird - PSW #932
Sports piracy ring linked to PirloTV disrupted in 44-domain takedown
The Alliance for Creativity and Entertainment (ACE), in collaboration with UEFA, UC3, and Mexican authorities, successfully shut down 44 domains linked to Pi...
BreachRx launches AI incident command center to handle multiple simultaneous attacks
The Rex Platform is designed to combat increasingly sophisticated and frequent cyberattacks, which BreachRx attributes to the proliferation of AI tooling tha...
Russia reportedly hacked dissident's phone with Cellebrite tools after company cut ties
The report by The Citizen Lab found evidence that a Russian government investigative unit used Cellebrite's UFED tool to access the iPhone of opposition poli...
Incode acquires Identiq, invests $100 million in privacy-preserving identity infrastructure
The $100 million investment will support on-device processing, research into privacy-enhancing technologies, and engineering hires.
China's 360 Security Technology unveils AI models for vulnerability discovery
During the ISC.AI 2026 conference in Beijing, 360 Security Technology introduced Yitian Tulong, comprising two AI models: Tulongfeng for vulnerability discov...
Your CISO is becoming a safety architect (whether they know it or not)
The biggest risk to your enterprise is no longer the attacker on the outside. It's the agent on the inside.
New 'Edgecution' malware uses browser extension to deploy ransomware
The Edgecution malware exploits the Chrome Native Messaging protocol to enable communication between browser extensions and native desktop applications.
Vulnerability Management is Broken: How to Reduce Risk (Not Just CVEs) in Containers - WC #1
ASIO establishes dedicated teams to counter nation-state cyber sabotage
As reported by The Register, Australia's Security and Intelligence Organisation (ASIO) has formed specialized units to combat cyber sabotage orchestrated by ...
Website shames companies for not offering passkeys
The website whynopasskeys.com highlights that one in four major apps and services, including Instagram, Netflix, and Spotify, have yet to implement passkey a...
StealC infrastructure takedown assisted by AI analysis, C2 infiltration
Microsoft, Proofpoint, IBM, Europol and other partners took aim the StealC and Amadey “assembly line.
Did AI kill vulnerability management—or just expose its flaws?
The industry just has to face that vulnerability management has been broken for years.
Nationwide GSM-R outage halts German trains
The outage, which began at 10:30 p.m.
EvilTokens phishing service scales attacks 1,380% with AI integration
The Huntress report highlights how EvilTokens operates like a modern tech startup, offering sophisticated phishing capabilities through subscription tiers ra...