AnonyMousKIT phishing service targets Apple credentials and Activation Lock
AnonyMousKIT is specifically designed to circumvent Apple's Activation Lock, a security measure that links an Apple device to its owner's Apple ID, making st...
SC Media
20 articles
WhatsApp enhances account security with passkeys and stronger verification
WhatsApp has introduced the ability for users to create multiple passkeys, allowing separate secure logins for different devices and platforms.
Russian hackers use 'zero-click' email attacks against organizations
The "beehive" attacks, attributed to the Russian group Laundry Bear (also known as TA488 and Void Blizzard), exploit a flaw in Zimbra webmail, allowing attac...
Nvidia NemoClaw vulnerability allows full control of AI agent's local model server
The vulnerability, identified as CVE-2026-65105, can be exploited by visiting a malicious website.
Why human-speed defense has failed
Defenders need AI today so they can run at the same speed as the attackers.
Apple reverses Hide My Email domain change after user backlash
Users expressed concerns that the shift to @private.icloud.
Linux Foundation to govern TRACE specification for AI agent security
TRACE, developed by OPAQUE in collaboration with AMD, Intel, Microsoft, and the Technology Innovation Institute, creates a hardware-backed, cryptographically...
India drops plan for cross-industry biometric database but keeps verification
Biometric Update reports that India's Department of Telecommunications (DoT) has abandoned its proposal for a unified Biometric Identity Verification System ...
Nutex investigating data breach after unauthorized access to servers
Nutex Health, a for-profit healthcare company operating 28 facilities across 12 states, detected the intrusion and has since hired external incident-response...
Mobile banking trojans expand capabilites; 66% now allow full device takeover
Banking trojans have evolved to include remote control and ransomware capabilities.
Connecting Cyber Risks to Board Outcomes & BHUSA interviews from Mimecast & Zscaler - Dan Bowden, Leslie Nielsen, Brett Stone-Gross - BSW #462
Fibonacci, Hidden Sounds, Teams, Zimbra, Entra-ID, z.ai, Schrödinger's, Aaran Leyland - SWN #610
From tool stack to defense system: Connecting the security dots
How well do your various security tools play together? AI can organize them into an army.
CISA adds Oracle WebLogic bug to its list of exploited vulnerabilities
Experts say exploiting WebLogic middleware gives attackers access to an enterprise's core business apps.
Why mission risk should drive cyber operations strategies
Here's how a risk-based approach can foster cyber resilience.
Instinct AI assistant faces privacy concerns
Developed by Spear Street Technology, led by former Sierra scientist Noah Shinn, Instinct operates by integrating with users' applications and devices, inclu...
Unpatched Calix router vulnerability allows remote attackers to expose home networks
The flaw, identified as CVE-2026-75501, affects devices running EXOS/6.6.
New 'Sleepwalker' backdoor uses custom command language
Discovered by malware researcher Dominik Reichel, Sleepwalker impersonates Microsoft's dpapi.dll and loads via side-loading into ESET Management Agent.
Alabama attorney general subpoenas OpenAI over AI breach
The investigation by Alabama's Attorney General's office aims to determine if OpenAI's handling of the incident, which involved a powerful AI model accessing...
Codex ClickFix installation lure spreads suspected AMOS infostealer
The attack uses iframes embedded in Google Sites to deliver malicious content from a trusted domain.