Healthcare and IT security practitioners worry some of the proposed amendments are not practical for a sector that lacks resources and often uses legacy equipment. – Read More
New cybersecurity startup Aurascape emerged from stealth today with an AI-native security platform to automate security policies for AI applications. – Read More
Artificial intelligence poses a significant concern when it comes to nation-state cyberthreats and AI’s ability to supercharge attacks. – Read More
Fortinet has released security updates to address a critical security flaw impacting FortiSwitch that could permit an attacker to make unauthorized password changes. The vulnerability, tracked as CVE-2024-48887, carries a…
Cybersecurity researchers have disclosed details of a now-patched security flaw in the Amazon EC2 Simple Systems Manager (SSM) Agent that, if successfully exploited, could permit an attacker to achieve privilege…
Neither security issue requires user interaction; and one of the vulnerabilities was used to unlock a student activist’s device in an attempt to install spyware. – Read More
Threat actors have been observed distributing malicious payloads such as cryptocurrency miner and clipper malware via SourceForge, a popular software hosting service, under the guise of cracked versions of legitimate…
The NCSC and partners publish new information and mitigation measures for those at high risk from two spyware variants. – Read More
This advisory provides new and collated threat intelligence on two variants of spyware known as BADBAZAAR and MOONSHINE, and includes advice for app store operators, developers and social media companies…
Spyware variants MOONSHINE and BADBAZAAR are being used to target mobile devices of individuals around the world. – Read More
Research by commercial real estate data and technology company, Search Acumen, suggests that it will take until at least 2040 for all rented commercial properties to meet the 2030 MEES…
The malware’s creators insist a new open source version of Neptune is for educational use by pen testers, but a raft of sophisticated backdoor and evasion capabilities says otherwise. –…
No-code and low-code platforms offer undeniable benefits. But when security is an afterthought, organizations risk deploying vulnerable applications that expose sensitive data and critical systems. – Read More
Key Takeaways: When rolling out an AI tool across your organization, consider how company data might be exposed across internal teams. Internal data access isn’t just a governance concern—contracts professionals…
I’ve said it before, and I’ll say it again—contracts are not legal documents; they are business documents that memorialize business transactions. While many in-house counsel recognize the importance of being…