ServiceNow unveils AI agents to accelerate enterprise self-defense
ServiceNow launched a new, agentic chapter in enterprise security and risk, introducing AI agents to power the rise of self-defending enterprises. The new agents, available…
Month: May 2025
Polish authorities arrested 4 people behind DDoS-for-hire platforms
Polish authorities arrested 4 people behind DDoS-for-hire platforms Pierluigi Paganini May 08, 2025 Polish police arrested 4 people behind DDoS-for-hire platforms used in global attacks,…
ProcessUnity Evidence Evaluator flags discrepancies in a third-party’s controls
ProcessUnity introduced Evidence Evaluator, an generative AI that reduces the manual lift of assessing and validating third-party security controls. A key component of ProcessUnity’s Third-Party…
Russian Hackers Using ClickFix Fake CAPTCHA to Deploy New LOSTKEYS Malware
The Russia-linked threat actor known as COLDRIVER has been observed distributing a new malware called LOSTKEYS as part of an espionage-focused campaign using ClickFix-like social…
Healthcare workers regularly upload sensitive data to GenAI, cloud accounts
Healthcare organizations are facing a growing data security challenge from within, according to a new report from Netskope Threat Labs. The analysis reveals that employees…
How Attackers Are Exploiting Business Logic
As businesses rely more on APIs, attackers are quick to turn that trust into opportunity. Among the most dangerous and difficult-to-detect threats are business logic…
Internal Chats and Data Leaked Online
The notorious LockBit ransomware group, once considered one of the world’s most prolific cyber extortion rings, has itself become the victim of a major cyberattack.…
Passkeys to replace Passwords in UK government sector for better cybersecurity
In today’s digital age, passwords are becoming increasingly unreliable. Cybercriminals are now using advanced AI-powered tools to quickly guess passwords, making it easier for them…
Even the best safeguards can’t stop LLMs from being fooled
In this Help Net Security interview, Michael Pound, Associate Professor at the University of Nottingham shares his insights on the cybersecurity risks associated with LLMs.…
Cisco Patches CVE-2025-20188 (10.0 CVSS) in IOS XE That Enables Root Exploits via JWT
May 08, 2025Ravie LakshmananVulnerability / Network Security Cisco has released software fixes to address a maximum-severity security flaw in its IOS XE Wireless Controller that…
Cybersecurity Insurance: A Crypto Must?
Imagine you’re checking the Bitcoin price first thing in the morning, feeling good about your growing portfolio, when suddenly—bam! You realize your digital wallet has…
Cisco IOS XE Wireless Controllers Vulnerability Lets Attackers Seize Full Control
A critical security flaw has been discovered in Cisco IOS XE Wireless LAN Controllers (WLCs), potentially allowing unauthenticated remote attackers to gain full control of…