Predictable costs, provable control drives data repatriation
As AI becomes the latest impost to drive up the cost of doing business, prudent Australian organisations reconsider what stays in public cloud and what…
Author: Cybernoz
WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update
WhatsApp on Tuesday announced several new features designed to enhance account security, including related to passkeys, two-step verification (2SV), and caller context. The Meta-owned messaging…
Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable
Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable Pierluigi Paganini August…
Arrested man allegedly impersonated NSA elite hacking unit, Supreme Court chief justice
Colorado police arrested a man last week over charges that he impersonated both Supreme Court Chief Justice John Roberts and head of the National Security…
How Equifax is using AI to elevate its cybersecurity
“We can use AI in that process as well,” Koppen says, noting how AI has helped Equifax perform code review earlier in the design process,…
Fast Track ISM-ready cloud environments and IRAP Assessments with Landing Zone Accelerator on AWS
This post announces the availability of a new independent assessment report available on AWS Artifact analyzing how Landing Zone Accelerator on AWS (LZA) can automatically…
The patch window is collapsing: Why security needs a new control plane
For decades, cybersecurity defenders have relied on a relatively straightforward model: a vulnerability is disclosed, security teams assess exposure, test available fixes, deploy patches into…
New Partner View for Security Incident Investigations
For a long time, partners have told us the same thing: when an investigation was closed as benign, it was hard to know what actually…
LACMA data breach last year exposed social security and medical data
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. The museum says that on…
SynkLoader Mimic as IT Support Personnel Attacking Users Via Microsoft Teams
SynkLoader is using Microsoft Teams conversations to turn routine IT support requests into a route for malware delivery. The campaign relies on impersonation rather than…
Shadow AI Is the New Shadow IT — And Policy Is Just the Starting Line
Every few weeks I talk to a security leader who tells me they have shadow AI in progress. They wrote an acceptable use policy. They…
Scammers Impersonate Microsoft to Push Fake Security Scans and Refund Fraud
A cluster of fraudulent websites impersonating Microsoft is using fake “security scans” to pressure victims into uninstalling antivirus products, disclosing personal and banking information, and…