Okta to acquire identity threat detection startup Permiso Security
The acquisition aims to integrate Permiso’s technology for detecting and mitigating identity threats across human, non-human, and agentic identities into Okt...
SC Media
20 articles
UK Department for Education confirms data breach affecting over 600,000 records
The breach, claimed by the ExfilSquad hacking group, exposed names, job titles, and phone numbers of head teachers, university staff, and government officials.
AI amplifies dangling DNS takeover risks, research shows
Security firm Silent Push's research, dubbed "DangleGeddon," utilized AI to massively expand the discovery of vulnerable domains and subdomains.
Russia charges Telegram CEO Pavel Durov with aiding terrorism
The Kremlin claims Telegram facilitated "acts of sabotage and terrorism, mass murder, and cyber fraud," resulting in "numerous human casualties.
Australian privacy watchdog clarifies rules on facial recognition in retail
The OAIC's updated guidance clarifies exceptions to consent obligations for Australian Privacy Principle (APP) entities considering facial recognition in ret...
FTC sues Hims & Hers for alleged deceptive privacy practices and data sharing
The lawsuit alleges that Hims & Hers placed pixel-sized trackers from Meta, Snap, Microsoft, Pinterest, Reddit and X on its website.
Silver Fox group uses new drivers in BYOVD attacks against Japanese manufacturer
The attack chain begins with a phishing lure disguised as an invoice, utilizing attacker-controlled content hosted on legitimate QQ and Tencent Cloud services.
Sysadmin AI adoption lags behind 2024 predictions
The Action1 2026 Survey Report highlights significant gaps between 2024 predictions and 2026 reality for AI adoption in IT workflows.
Brinks Home confirms data breach after ShinyHunters claims attack
Brinks Home identified the attack on July 20, though the ShinyHunters extortion gang claimed the breach occurred on July 13.
UK cybersecurity agency urges manufacturers to improve device forensic observability
The NCSC highlights that network devices like firewalls and VPN gateways are increasingly targeted by attackers.
Cantina launches with $8 million to automate post-vulnerability security
The platform utilizes AI agents to automate the entire security workflow after a vulnerability is identified, including discovery, triage, remediation, and v...
Belarusian code found in popular EU app store apps Nicegram and eSIM Plus
Mysterium VPN's research team analyzed the Android packages of Nicegram, with over 50 million downloads, and eSIM Plus, with over 1 million.
Sandwich Hats - PSW #937
Critical Azure Cosmos DB flaw risked cross-tenant compromise
Patched Azure Cosmos DB bug threatened Microsoft and customer databases.
Identity Governance Framework Optimization: Diagnosing Decay and Rebuilding
Certification rubber-stamping is the most common form of governance decay.
How to Evaluate Third-Party Risk, Regulatory Response, and Evidence Platforms
Can the platform make the gap between what the organization claims and what the evidence supports visible before the response is sent?
Industry CISOs urge resilience, AI governance and regulatory reform
CISOs urge resilience, supply chain security and simpler cyber rules.
Why we need to build AI into our network appliances
Attackers continue to leverage AI to target our edge appliances – so why hasn’t the industry built-in AI into those devices yet?
The modern path to unified Linux identity security: Securing hybrid infrastructure in a cloud-first world
In the cloud-based enterprise, Linux servers can't stay isolated on legacy authentication systems.
How to Evaluate AI Claims in Identity Platforms
The AI Capability Verification Matrix will help test claims critical to the purchase decision