China’s Flax Typhoon Turns Geo-Mapping Server into a Backdoor Summary Researchers at Reliaquest uncovered a sustained compromise by a Chinese APT group tracked as Flax Typhoon that turned a public-facing…
Financial, Other Industries Urged to Prepare for Quantum Computers Summary Experts and industry bodies, led by FS-ISAC, warn that financial institutions, government agencies and other organisations holding long-lived sensitive data…
Critical infrastructure CISOs Can’t Ignore ‘Back-Office Clutter’ Data Summary Critical infrastructure organisations have long hardened OT and ICS — the obvious crown jewels. But Joe Pearce argues the biggest, quietly…
1Password Addresses Critical AI Browser Agent Security Gap Summary 1Password has introduced Secure Agentic Autofill, an integration with Browserbase designed to let AI-powered browser agents authenticate without exposing user credentials.…
The Fight Against Ransomware Heats Up on the Factory Floor Summary Ransomware actors continue to prioritise manufacturing, exploiting the sector’s large attack surface, legacy operational technology (OT) and tight tolerance…
Feds Shutter ShinyHunters Salesforce Extortion Site Summary The FBI, working with French law enforcement, seized the BreachForums domain that had been repurposed as an extortion portal by the group calling…
Cyberattackers Target LastPass, Top Password Managers Summary Major password managers — including LastPass, 1Password and Bitwarden — have been impersonated in a wave of phishing attacks. Over a three-week period…
Leaks in Microsoft VS Code Marketplace Put Supply Chain at Risk Summary Researchers at Wiz found more than 550 validated secrets exposed inside VS Code extension packages across Microsoft’s VS…
LevelBlue Announces Plans to Acquire XDR Provider Cybereason Summary LevelBlue, the managed security service provider spun out of AT&T, has announced plans to acquire XDR vendor Cybereason. The purchase is…
‘Mysterious Elephant’ Moves Beyond Recycled Malware Summary Kaspersky researchers say the threat group tracked as “Mysterious Elephant” has evolved from reusing others’ malware to deploying a compact, custom toolset in…
