When your biggest security risk has never signed a contract

The Computer Weekly Security Think Tank considers the intersection of AI and IAM. In this article we explore how the frontiers of identity are expanding in the agentic era,... Read more »

Microsoft SharePoint Has a New RCE Flaw. If You Haven’t Patched Yet, Go Do That.

A critical vulnerability, tracked as CVE-2026-45659, in Microsoft SharePoint can allow attackers to achieve remote code execution with little effort. Microsoft released security updates to patch a high-severity SharePoint... Read more »

The Gentlemen emerging as key ransomware player

An emerging ransomware crew known as The Gentlemen is becoming a force to be reckoned with, according to NCC’s latest monthly threat data Read more »

The Hidden Ransomware Economy Running on Exposed Databases

A 5-year study on the Ransomware Economy found that 30,515 exposed databases were hit by ransom attacks, causing massive damage despite victims never paying. Database extortion doesn’t look like... Read more »

Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms

Cybersecurity researchers have shed light on a cross-platform malware called RemotePE that has been put to use by the North Korea-linked Lazarus Group in attacks targeting financial and cryptocurrency... Read more »

Hacker Lists 340M OnlyFans User Records for Sale

A hacker is selling a 340M OnlyFans database, but the seller says old leaks and public data were used to link creators and subscribers to real identities. The post... Read more »

WhatsApp Local Storage Claim Raises Apple Privacy Questions

Researchers allege that WhatsApp’s local storage on macOS and iOS may raise privacy concerns, though experts dispute the broader claim. The post WhatsApp Local Storage Claim Raises Apple Privacy... Read more »

Malware Found in Laravel-Lang Composer Packages After Git Tag Poisoning Attack

Attackers have poisoned four Laravel-Lang Composer packages by rewriting hundreds of Git tags, putting many Laravel apps at risk. Hackers compromised four popular Laravel-Lang Composer packages and injected malware... Read more »

What VTEX’s AI push really means for European retailers

Brazilian platform provider VTEX is pushing hard into Europe with bold claims around artificial intelligence, but how relevant is that pitch for European CIOs? Read more »

Nimbus Manticore Expanded Attacks With AI-Assisted Malware and Fake Zoom Installers

Nimbus Manticore accelerated cyberattacks during wartime, using AI-assisted malware, fake Zoom installers, and SEO poisoning. When the United States launched Operation Epic Fury against Iran at the end of... Read more »
Subscribe to our Newsletter