Australian cyber teams test data security controls after Court transcriptions offshored
The Federal Court of Australia has brought in CyberCX to test data and security controls of the technical platform used for transcriptions after some of…
Month: May 2026
Vulnerability in Popular Conference Software Granted Attackers a 100% Talk Acceptance Rate
Researchers at Novee Security have disclosed a high-severity vulnerability in Pretalx, an open source platform that powers the call-for-papers (CFP) and scheduling processes for many…
The LA Metro Attack Wasn’t Hacktivism. It Was a State Operation With a Costume On.
The LA Metro Attack Wasn’t Hacktivism. It Was a State Operation With a Costume On. Pierluigi Paganini May 27, 2026 Iran’s “hacktivist” group Ababil of…
CrowdStrike disrupts Glassworm botnet that preyed on open-source supply chain
CrowdStrike has dismantled the Glassworm botnet in an operation aided by Google and Shadowserver, stripping the operators’ access to infrastructure that helped threat actors infect…
The NSA, ‘Mythos’ and the quiet emergence of AI cyber doctrine
I remember when cyber operations lived inside scripts. They moved into frameworks, then into automated pipelines, then into what we somewhat optimistically called orchestration. Each…
Texas HB 3834 Cyber Security Awareness Training Requirements
Did you know that Texas passed a new regulation for state employees to participate in a mandatory cyber security awareness training program? In June of…
FBI warns of in-person data theft attacks from extortion gang
The FBI warned on Tuesday that the Silent Ransom Group (SRG) extortion gang is now targeting U.S.-based law firms in in-person data theft attacks. “As…
ROADtools Misused in Cloud Attacks to Steal Tokens and Bypass MFA Controls
A well-known open-source security framework called ROADtools has been turned against the organizations it was originally built to protect. Once a legitimate red-teaming tool, attackers…
Most Organisations Can’t See Their AI Traffic and Attackers Are Already Exploiting That
A new report released today by Check Point Software lays out in stark terms how far enterprise security architecture has fallen behind AI adoption and…
GitHub Enterprise Server 3.20.3 Addresses Critical Security Flaws
GitHub has released Enterprise Server (GHES) version 3.20.3, addressing multiple critical and high-severity vulnerabilities that could allow attackers to access internal services, escalate privileges, and…
AppOmni’s Marlin AI automates SaaS threat analysis, triage, and remediation at scale
AppOmni has launched Marlin AI to transform how enterprise organizations defend complex SaaS applications. Marlin AI delivers autonomous AI-powered SaaS security that leverages AppOmni’s deep…
Company bragged phone mics could listen to conversations. They couldn’t.
A media company and two of its marketing partners have been fined for selling a service which, they said, listened in to people’s conversations through…