Okta details ‘Work Panel’, a turnkey SaaS platform for vishing crews
Identity provider Okta’s Threat Intelligence said it has obtained an inside look at a new criminal operator console that packages everything a voice-phishing crew needs…
Latest Cybersecurity News — Page 102
View all →
JFrog Zero-Days Exploited in OpenAI-Hugging Face Hack
A JFrog zero-day vulnerability was at the core of the recently disclosed OpenAI-Hugging Face hack, OpenAI has confirmed. The incident was disclosed on July 16,…
AI-assisted security tools are finding more bugs, but the threat level has not changed
AI systems like Anthropic’s Project Glasswing and Microsoft’s MDASH are aiding in the discovery of vulnerabilities, filling the ever-growing pool of defects that defenders have…
A 13-year-old flaw is exposing tens of thousands of data center management systems
Why this attack method is dangerous BMCs sit a layer below that which many security products monitor, on shared out-of-band management networks where administrative credentials…
Introducing WizOS: Securing Wiz from the ground up with hardened, near-zero-CVE container base images.
Wiz is trusted by teams to protect everything they build and run in the cloud. That trust starts with how we build our platform. To…
CISA shares advice on isolating vital systems during cyberattacks
The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of…
Hackers Are Hiding Commands in Emails to Trick the AI Systems Protecting You
Attackers are beginning to hide malicious instructions inside ordinary emails, documents, calendar invites, and online advertisements. The goal is not always to fool a person.…
A Typo Landed an Innocent Gamer in Prison for 18 Months
One missing underscore in a Skyrim-themed username put an innocent Nova Scotia man in prison for 18 months. A 2018 child-luring investigation, which began in…
Cybercriminals Use Adversarial Prompt Injection to Evade AI-Powered Security Tools
Cybercriminals are rapidly operationalizing adversarial prompt injection techniques to evade AI-powered security controls, signaling a shift toward targeting machine-driven defenses rather than end users directly.…
ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak
ShinyHunters has claimed responsibility for a data breach at professional services firm Ernst & Young (EY), threatening to publish stolen files unless the company contacts…
Your AI agents can reach data no one approved
A credential expired. An AI agent kept using it anyway, and a mid-sized company’s systems went down for a quarter’s worth of trouble before anyone…
Vatican’s Click To Pray app exposed personal data from 700,000 users
A prayer app launched by Pope Francis in 2019 contained a security flaw that exposed the personal information of hundreds of thousands of users before…