General cybersecurity news and analysis
Nine-year-old npm packages compromised to steal API keys through obfuscated code, highlighting security risks in outdated dependencies.
Cyber Crew claims to hack an American cable company, showcasing their feat with a cringe-worthy music video as proof of their digital prowess.
Explore effective strategies for eDiscovery modernization, focusing on risk mitigation from platform selection to document delivery.
Microsoft Stream Classic domain hijacking leads to spam flooding SharePoint sites, compromising security and disrupting user experience.
Microsoft Stream Classic faces a domain compromise, leading to spam attacks on SharePoint sites. Stay alert and secure your data.
Outdated IT infrastructure jeopardizes the UK’s AI ambitions, hindering innovation and competitiveness in the rapidly evolving tech landscape.
Island raises $250M to revolutionize SASE with its innovative enterprise browser solution, enhancing security and user experience for businesses.
OpenAI launches a security initiative offering rewards for discovering critical bugs, enhancing safety and reliability in its AI systems.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Officials warn that budget cuts to CISA could jeopardize US election security, raising concerns over the integrity of future elections.
Infostealer campaign targets developers by breaching 10 npm packages, compromising sensitive data and highlighting security risks in software development.
RFK Jr. critiques HHS budget cuts, highlighting their detrimental effects on HIPAA enforcement and cybersecurity units essential for patient data protection.
Leaked Signal messages reveal alarming security concerns within the White House, raising questions about communication protocols and data protection.
Explore the challenges CISOs face in communicating risks during MFA adoption, balancing security needs with user experience and organizational buy-in.
Discover how the Advanced Meerkat Phishing Kit mimics 114 brands, leveraging victims’ DNS email data for sophisticated cyberattacks.
Microsoft unveils a new Windows task feature for faster launches of Office apps, enhancing productivity and streamlining user experience.
Discover the deadly consequences of falling for phishing scams, including identity theft, financial loss, and compromised personal security. Stay informed!
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Discover how CoffeeLoader malware is linked to SmokeLoader activities, revealing new threats in the cybersecurity landscape. Stay informed and protected.
Discover the top 4 WordPress vulnerabilities exploited by hackers in Q1 2025 and learn how to protect your site from potential threats.
Security shop dismantles ransomware gang, alerting authorities to prevent further attacks and protect businesses from cyber threats.
“Over 6 million Oracle Cloud records reportedly compromised, raising concerns over data security and privacy breaches in cloud services.”
Explore the evolving ransomware landscape of 2025, highlighting the resurgence of bloodsucker tactics and their impact on cybersecurity strategies.
“Stay informed on the $13 million Abracadabra breach in the latest Cryptohack update. Discover key details and implications for the crypto community.”
Explore strategies to bridge the IoT security divide, safeguarding enterprises from emerging risks and ensuring robust protection in a connected world.
Hackers modify RansomHub’s EDRKillShifter to enhance Medusa, BianLian, and Play ransomware attacks, increasing their evasion capabilities.