Hands On Cyber Physical Systems Training Highlights a Critical Need for Stronger ICS Security
Cybersecurity in industrial environments is no longer limited to protecting computers, applications, and data. As operational technology continues to connect with IT networks, cloud services, remote access technologies, and increasingly intelligent systems, cyberattacks can create consequences that extend into the physical world. A new hands on cyber physical systems training program associated with the ICS […]
WhatsApp Strengthens Account Security With Multiple Passkeys and Stronger Two Step Verification
As messaging platforms become increasingly important for personal communication, business operations, customer engagement, and professional collaboration, protecting the accounts behind those communications has become a major cybersecurity priority. WhatsApp is introducing several account security improvements designed to make account takeover more difficult. The updates include support for multiple passkeys, stronger two step verification, and additional […]
91 Spring Framework Vulnerabilities Patched: A Critical Reminder for Enterprise Application Security
Modern enterprises depend heavily on open source frameworks to build, integrate, and operate business critical applications. The latest security updates for Broadcom’s Spring application framework demonstrate just how significant the security exposure can become when widely used software components contain vulnerabilities. According to SecurityWeek, developers behind the Spring ecosystem have released updates addressing 91 vulnerabilities. […]
Nearly $1 Billion Uber GDPR Fine: A Major Warning About Automated Decision Making and AI Governance
The use of automation and artificial intelligence is transforming how organizations manage fraud detection, workforce platforms, customer services, risk management, and operational decisions. But when automated systems make decisions that can significantly affect people’s lives, organizations must ensure that technology operates within privacy regulations, governance frameworks, and appropriate human oversight. A recent decision by the […]
Banking Trojans Are Evolving: Manic, Grandoreiro and ToxicPanda 2.0 Raise New Financial Cybersecurity Concerns
Banking malware continues to evolve as cybercriminals develop more sophisticated ways to steal credentials, intercept authentication information, control devices, and conduct fraudulent financial activity. Recent research has highlighted three banking trojan families receiving particular attention: Manic, Grandoreiro, and ToxicPanda 2.0. Their latest capabilities demonstrate how attackers are combining traditional phishing and credential theft with mobile […]
Cybersecurity Lessons From Zombie Cards, Telecom Intrusions and AI Driven Software Risks
Cybersecurity threats are increasingly crossing the boundaries between financial systems, telecommunications infrastructure, software development and artificial intelligence. Three recent developments highlight this changing threat landscape: research demonstrating how expired contactless payment cards could potentially be revived, a sophisticated intrusion involving telecommunications infrastructure, and renewed debate about the role of AI in software vulnerabilities. Together, these […]
Atlassian and Splunk Security Patches Highlight the Growing Risk of Enterprise Software Vulnerabilities
Enterprise software platforms sit at the center of modern business operations. Collaboration tools, development platforms, monitoring systems, analytics environments, and AI applications often have access to sensitive information and critical infrastructure. Recent security updates from Atlassian and Splunk highlight why organizations need to treat vulnerability management as an ongoing cybersecurity priority. Security updates released by […]
14,000 IP Cameras Compromised: Why Connected Surveillance Devices Have Become a Major Cybersecurity Risk
Internet connected cameras are often treated as physical security equipment. But when these devices are exposed to the internet, poorly configured, outdated, or protected by weak credentials, they can become an entry point for cyberattacks. A recent campaign involving more than 14,000 Dahua IP cameras across Ukraine and Russia highlights how attackers can compromise large […]
US Charges 17 Iranian Hackers: A Major Warning About Credential Theft, Intellectual Property and Nation-State Cyber Threats
Cyberattacks targeting universities, research organizations, businesses, and government agencies continue to demonstrate how stolen credentials can become a gateway to highly valuable information. The United States has announced charges against 17 members and associates of the Iran-based Mabna Institute in connection with a long-running campaign targeting organizations in the US and other countries. The US […]
Prevalent AI Raises $22 Million to Strengthen Enterprise Data Intelligence and Secure AI Operations
Enterprise organizations are generating more data than ever, but having large volumes of data does not automatically provide better security. Security teams often work across disconnected tools, identities, applications, cloud environments, security controls, and data sources. This fragmentation can make it difficult to understand what assets exist, where security gaps are located, and which risks […]