How the Wiz Red Agent caught data exposure
At a Fortune 500 firm, a public web page was quietly serving sensitive data tied to one of the company’s business units. No breach alert.…
Latest Cybersecurity News — Page 43
View all →
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
Acknowledgments: Special thanks to Dray Agha for his extensive contributions to this investigation. Background In September, the Huntress agent was deployed on an organization that…
Hackers hijack Google domains after breaching ccTLD registries
Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone…
Discord Users’ Data Exposed in Security Bot Double Counter Security Breach
Double Counter, a Discord security bot, has disclosed a breach that exposed user data after an attacker broke into its cloud systems on October 4,…
The trust gap that AI watermarking can’t close
By Alex Laurie, GTM CTO, Ping Identity Generative AI has made content creation effortless, but establishing where content originates – and whether it can be…
Critical Progress DataDirect GenAI Flaw Lets Attackers Execute Arbitrary OS Commands
Progress has disclosed a critical command injection vulnerability in the Early Access Release of its DataDirect Autonomous REST Connector AI Model Generator agents. This vulnerability,…
Dread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys
Dread, one of the best-known Tor-based discussion forums used by dark web market communities and cybercrime watchers, appears to have been hijacked by unknown operators…
Gremlin Foresight AI finds system weaknesses and verifies the fixes
Gremlin has announced the general availability of Gremlin Foresight AI. Following a successful beta, Gremlin Foresight AI has proven it can identify and address reliability…
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
In August, the Malwarebytes research team reported on a new malicious turnkey kit that makes it possible for almost anyone to launch a sophisticated online…
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6. Google’s own systems were…
Atlassian Team ’26 Europe: move to AI as team sport with ‘multi-player’ agentic system
Atlassian co-founder and CEO Mike Cannon-Brookes and his team unveiled a “multi-player” agentic AI system at the supplier’s customer conference in Amsterdam. In a press…
Anthropic opens its most powerful AI models to more security teams
Anthropic is expanding a program that allows vetted cyber security professionals to test its most powerful AI models with fewer safeguards, after its Project Glasswing…