The Fight Against Ransomware Heats Up on the Factory Floor Summary Ransomware actors continue to prioritise manufacturing, exploiting the sector’s large attack surface, legacy operational technology (OT) and tight tolerance…
1Password Addresses Critical AI Browser Agent Security Gap Summary 1Password has introduced Secure Agentic Autofill, an integration with Browserbase designed to let AI-powered browser agents authenticate without exposing user credentials.…
Critical infrastructure CISOs Can’t Ignore ‘Back-Office Clutter’ Data Summary Critical infrastructure organisations have long hardened OT and ICS — the obvious crown jewels. But Joe Pearce argues the biggest, quietly…
Financial, Other Industries Urged to Prepare for Quantum Computers Summary Experts and industry bodies, led by FS-ISAC, warn that financial institutions, government agencies and other organisations holding long-lived sensitive data…
China’s Flax Typhoon Turns Geo-Mapping Server into a Backdoor Summary Researchers at Reliaquest uncovered a sustained compromise by a Chinese APT group tracked as Flax Typhoon that turned a public-facing…
Microsoft Drops Terrifyingly Large October Patch Update Summary Microsoft’s October Patch Tuesday is enormous: 175 CVEs were patched, including multiple zero-days that are already being exploited and several flaws Microsoft…
Harvard University Breached in Oracle Zero-Day Attack Summary Harvard confirmed it was hit by an attack that exploited a zero-day flaw in Oracle E-Business Suite (EBS) tracked as CVE-2025-61882. The…
F5 BIG-IP Environment Breached by Nation-State Actor Summary Application security vendor F5 disclosed on 15 October 2025 that a sophisticated nation-state actor maintained long-term, persistent access to parts of its…
‘Mysterious Elephant’ Moves Beyond Recycled Malware Summary Kaspersky researchers say the threat group tracked as “Mysterious Elephant” has evolved from reusing others’ malware to deploying a compact, custom toolset in…
LevelBlue Announces Plans to Acquire XDR Provider Cybereason Summary LevelBlue, the managed security service provider spun out of AT&T, has announced plans to acquire XDR vendor Cybereason. The purchase is…
