All of Singapore’s top companies have recently suffered cyberattacks through third-party breaches, despite achieving high cybersecurity ratings. According to a SecurityScorecard report, 91% of Singapore’s top 100 companies (by market…
Cybersecurity researchers have uncovered a new stealthy backdoor concealed within the “mu-plugins” directory in WordPress sites to grant threat actors persistent access and allow them to perform arbitrary actions. Must-use…
Chinese threat actors have been feeding off the same Ivanti RCE vulnerabilities we’ve known about since last year, partly thanks to complications in patching. – Read More
The White House released an AI plan chock-full of cybersecurity provisions among what the White House says are 90 AI-related desired “policy actions.” Informed by 10,000 pages of comments solicited…
A High Court judge has described as “extraordinary” the evidence of a solicitor who admitted he was only giving it because he was being paid to do so. The post…
A High Court ruling casting uncertainty over the immunity of advocates for what they say and do in court could have a “chilling effect, the Bar Council has warned. The…
HM Land Registry has missed the targets it set itself for reducing errors in new entries on the register and on productivity, according to its annual report. The post Land…
While 48 out of the top 50 UK law firms are publicly committed to climate-related targets, only nine have disclosed time-bound carbon reduction targets by 2030 or net zero targets…
It’s the first known instance of malware that abuses the UIA framework and has enabled dozens of attacks against banks and crypto exchanges in Brazil. – Read More
Hackers are using stolen goods such as credit cards and loyalty points to book travel for sometimes unsuspecting clients, and remote workers, SMBs, travel brands, and others are at risk.…
An ongoing phishing campaign is using fake versions of the department’s G5 grant portal, taking advantage of political turmoil associated with the DoE’s 1,400 layoffs. – Read More
Anyone can buy or collect data, but the goal must be to realize actionable insight relevant to the organization in question. – Read More
The newly launched security startup provides an engineering relationship management platform that provides enterprises with visibility across code, infrastructure, and tools. – Read More
As crawlers and bots bog down websites in the era of AI, some researchers say that the solution for the Internet’s most vulnerable websites is already here. – Read More
The threat actor behind the exploitation of vulnerable Craft Content Management System (CMS) instances has shifted its tactics to target Magento CMS and misconfigured Docker instances. The activity has been…