How to Design Segmentation That Actually Reduces Blast Radius
Does movement between these zones require explicit authorization or can it proceed on implicit trust?
SC Media
20 articles
GitHub and PyPI implement new security measures against supply-chain attacks
Based on information from Bleeping Computer, GitHub and the Python Package Index (PyPI) have introduced new time-based security mechanisms within their devel...
Russian hackers exploited Zimbra zero-day in espionage campaigns
Russian state-sponsored cybercriminals exploited a zero-day vulnerability in the Zimbra email and collaboration platform to conduct espionage against Western...
Steam forums used for ClickFix cryptominer attacks
In a report by Bleeping Computer, threat actors are exploiting Steam discussion forums to distribute cryptominers through a social engineering tactic known a...
The enduring mystery of hacker Phineas Fisher
As outlined in TechCrunch, the enigmatic hacker known as Phineas Fisher remains one of the most elusive and impactful figures in cybersecurity, a decade afte...
Malvertising campaign assembles malware in browser
A large-scale malvertising campaign is using fake websites for Solana, Luno, and TradingView, employing malicious JavaScript to assemble malware directly in ...
Phishing attacks on insurance companies evolve to real-time account hijacking
Phishing campaigns targeting financial institutions are evolving from credential harvesting for later use to real-time account hijacking, based on informatio...
Scammers impersonate ShinyHunters in new sextortion email campaign
Following insights from Bleeping Computer, threat actors are leveraging email addresses exposed in data breaches, previously leaked by the ShinyHunters extor...
Pope's prayer app leaks 700,000 user emails
The Click To Pray app, endorsed by the Pope and used by hundreds of thousands worldwide, was leaking user names and email addresses for months.
OnTrac parcel delivery company reports customer data breach
Bleeping Computer reports that the parcel delivery company OnTrac has experienced a data breach, potentially exposing customer personal details following a c...
Botnets powered by residential proxy networks are growing
Botnets powered by residential proxy networks are proliferating, enabling cybercriminals to evade detection by blending in with legitimate traffic, Lumen Tec...
CheckPoint authentication bypass bug exploited, added to CISA list
CISA orders rapid patching as Check Point auth bypass faces active attacks.
AI plans are being approved. Recovery plans are not
Do you spend more time managing AI agents than you save by using them? Here's how to make your ROI on agentic deployment.
When sensitive data moves everywhere, security attestations become a liability
Despite the CMMC pause, leaders still have to stand behind what they sign.
Balancing lead generation, growth, and security in the age of AI search
AI search visibility demands smarter bot security, not open access.
Phishing the agent: Why identity controls are essential to secure and manage AIs
Guardrails cannot serve as the primary security boundary for AI agents. Identity controls impose firmer limits.
Exploring AI Network Protocols; Vulnerability Truths and Guarantees; and the News - O'Shea Bowens, Jeremiah Grossman - ESW #469
What Attack Surface Management Actually Controls
ASM operates as a six-stage governance chain: discover, classify, assign, route, reduce, and monitor
What Is Application Security? A Complete Guide
Defined as the practice of protecting software applications from threats throughout their lifecycle
What Audit Readiness Actually Controls
Three gaps separate organizations with audit readiness from organizations with audit preparation capability