In a novel social engineering campaign, North Korea’s BlueNoroff is tricking company executives into downloading fake Zoom extensions that install a custom-built Mac malware suite. According to the findings by…
Robust cybersecurity frameworks are critically important, and third-party risk management (TPRM) was once a central component of these defense strategies. Based on how it’s practiced today, that time has passed.…
CSOs with Asana’s Model Context Protocol (MCP) server in their environment should scour their logs and metadata for data leaks after the discovery of a serious vulnerability. Asana, a software-as-a-service…
Nominations are officially open for the 2025 CSO30 Australia Awards, celebrating the country’s most effective and inspiring cybersecurity leaders. This year’s CSO30 Awards will once again be held alongside the…
Nation-state actors and well-funded criminal organizations employ advanced persistent threat (APT) methodologies designed specifically to evade traditional security measures. These attackers conduct extensive reconnaissance, move laterally with patience, and maintain…
Researchers from security firm Trend Micro warn that a critical remote code execution vulnerability patched in April in the Langflow AI agent framework is being exploited to deploy botnet malware.…
Cybersecurity professionals are under siege. In 2024, relentless cyberattacks (1636 per week on average) and soaring data breach costs ($4.88 million) collide with complex security tools, an overwhelming number of…
Der Hersteller für Nutzfahrzeuge Scania wurde von Cyberkriminellen angegriffen. Art Konovalov – shutterstock.com Der schwedische Hersteller für Nutzfahrzeuge Scania zählt zu den größten in Europa. Ein Cyberkrimineller hat kürzlich Daten…
Two new variants of WormGPT, the malicious large language model (LLM) from July 2023 that operated without restrictions to generate phishing emails, BEC messages, and malware scripts, have been uncovered,…
Developers hosting code repositories on GitHub continue to use GitHub Actions insecurely, setting up automatic workflows that can be exploited to extract sensitive authentication tokens, researchers warn. Security risks associated…
Ermittlern ist es gelungen, sämtliche Online-Betrugsseiten abzuschalten. simon jhuan – shutterstock.com Baden-württembergische Ermittlungsbehörden haben fast 800 illegale Websites beschlagnahmt. Das Cybercrime-Zentrum bei der Generalstaatsanwaltschaft Karlsruhe und das Landeskriminalamt (LKA) Baden-Württemberg…
Cybersecurity roles are rarely one-dimensional. In fact, a majority of professionals juggle responsibilities across multiple domains. According to the “2025 Cybersecurity Staff Compensation Benchmark Summary Report” by IANS and Artico…
AI agents are rapidly becoming foundational to enterprise operations. Whether triaging service tickets, automating policy enforcement, customizing user experiences or managing regulatory documentation, AI agents are no longer confined to…
Cybercriminals are exploiting a black-market search engine optimization (SEO) platform called Hacklink to hijack search engine results and promote phishing and other unscrupulous sites. According to a Netcraft research, the…
A malicious Python package posing as a harmless add-on for the Chimera sandbox environment, an integrated machine learning experimentation and development tool, is helping threat actors steal sensitive corporate credentials.…