The malware loader known as MintsLoader has been used to deliver a PowerShell-based remote access trojan called GhostWeaver. “MintsLoader operates through a multi-stage infection chain involving obfuscated JavaScript and PowerShell…
A year after Microsoft announced passkeys support for consumer accounts, the tech giant has announced a big change that pushes individuals signing up for new accounts to use the phishing-resistant…
Cybersecurity is one of the most high-stress professions in the world — and it’s only worsening. According to ISACA’s 2024 State of Cybersecurity survey, 60% of cybersecurity professionals say their…
An employee at Elon Musk’s artificial intelligence company xAI leaked a private key on GitHub that for the past two months could have allowed anyone to query private xAI large…
CISOs allowing remote access to Windows machines through Remote Desktop Protocol (RDP) should re-think their strategy after the discovery that changed or revoked passwords can still work, says an expert.…
This year’s top cyber challenges include cloud authorization sprawl, ICS cyberattacks and ransomware, a lack of cloud logging, and regulatory constraints keeping defenders from fully utilizing AI’s capabilities. – Read…
A panelist of SANS Institute leaders detailed current threats and provided actionable steps for enterprises to consider. – Read More
Real IDs have been in the works since 2005. Are their security standards still rigorous enough in 2025? – Read More
Microsoft on Wednesday announced that it will be creating a new position: a Deputy CISO for Europe. Who that Deputy CISO will ultimately be is unclear. Wednesday’s statement simply said…
The latest statement from the NCSC regarding the cyber incident impacting UK retailers – Read More
Microsoft has set May 5 as the deadline for bulk email compliance. In this Tech Tip, we show how organizations can still make the deadline. – Read More
Cybersecurity researchers have shed light on a new campaign targeting WordPress sites that disguises the malware as a security plugin. The plugin, which goes by the name “WP-antymalwary-bot.php,” comes with…
Download the May 2025 issue of the Enterprise Spotlight from the editors of CIO, Computerworld, CSO, InfoWorld, and Network World. – Read More
A LevelBlue report looks at what goes into the security postures of a cyber-resilient organization, and found that AI is still a blind spot. – Read More
How one unreasonable client got lucky during a cyber incident, despite their unreasonable response to the threat. – Read More