Beyond PQC: Building adaptive security programs for the unknown
In this Help Net Security interview, Jordan Avnaim, CISO at Entrust, discusses how to communicate the quantum computing threat to executive teams using a risk-based…
Latest Cybersecurity News — Page 1632
View all →
New Microsoft Exchange Server Vulnerability Allows Unauthorized Admin Privilege Escalation
Microsoft has disclosed a high-severity security vulnerability affecting Exchange Server hybrid deployments that could allow attackers with administrative access to escalate privileges and potentially compromise…
Cybercriminals are getting personal, and it’s working
Cybercriminals are deploying unidentifiable phishing kits (58% of phishing sites) to propagate malicious campaigns at scale, indicating a trend towards custom-made or obfuscated deployments, according…
AI can write your code, but nearly half of it may be insecure
While GenAI excels at producing functional code, it introduces security vulnerabilities in 45 percent of cases, according to Veracode’s 2025 GenAI Code Security Report, which…
Nigerian accused of hacking tax preparation businesses extradited to US
French authorities extradited a 39-year-old Nigerian national to the United States Monday for allegedly hacking into tax preparation businesses and participating in a years-long conspiracy…
Microsoft Exchange Server Vulnerability Enables Privelege Escalation
A critical security vulnerability in Microsoft Exchange Server hybrid deployments has been disclosed, allowing attackers with on-premises administrative access to escalate privileges to cloud environments…
Confusion reigns as phishers abuse Exchange Online Direct Send
An email feature for Microsoft’s Exchange Online that allows unauthenticated message submissions for mail deliveries is causing ongoing customer concern and confusion as attackers abuse…
Google commits US$1 billion for AI training at US universities
Google has announced a three-year, US$1 billion (A$1.54 billion) commitment to provide artificial intelligence training and tools to US higher education institutions and nonprofits. More…
OVIC sets limits on GenAI tool use in external meetings
The Office of the Victorian Information Commissioner (OVIC) has drawn a clear line when it comes to the insertion of generative AI into meetings between…
The Desync Delusion: Are You Really Protected Against HTTP Request Smuggling?
Andrzej Matykiewicz | 06 August 2025 at 22:22 UTC The Hidden Threat That’s Slipping Past Your Security HTTP request smuggling remains one of the most…
ACS backs digital productivity vision
The Australian Computer Society (ACS) has welcomed the Productivity Commission’s interim report on Harnessing Data and Digital Technology as a timely acknowledgment of the central…
HTTP/1.1 Must Die: What This Means for Contract Pentesters and MSSPs
Andrzej Matykiewicz | 06 August 2025 at 22:23 UTC At Black Hat USA and DEFCON 2025, PortSwigger’s Director of Research, James Kettle, issued a stark…