Disgraced eMudhra drops out of TLS business after using cert private key of 4
Flubbed key signing "ceremony" allowed minting of web credentials for any site.
22-10-2026 20:17
WorkNest Secure Gains The Cyber Scheme Accreditation
UK cybersecurity specialist WorkNest Secure has achieved Accredited Organisation status under The Cyber Scheme, providing further independent recognition of the technical expertise and professional standards maintained across its services. The accreditat
22-10-2026 18:41
Critical PHP Vulnerabilities Spark Global Security Alert: Industry Experts React
Two critical PHP vulnerabilities, the widely used programming language underpinning millions of websites and web applications, have prompted urgent warnings from cybersecurity authorities worldwide. Following reports on the 20th October that details of t
22-10-2026 15:58
Huntress Expands Ingram Micro Partnership Across Canada and Latin America
Cybersecurity company Huntress has expanded its distribution partnership with Ingram Micro into Canada, Latin America and the Caribbean, strengthening its channel presence across the Americas. Building on its existing relationship in the United States, t
22-10-2026 15:11
DOQEX Achieves Cyber Essentials Certification to Strengthen Security Standards
UK-based secure data exchange specialist DOQEX has achieved Cyber Essentials certification, adding another recognised security standard to its existing portfolio of accreditations. The York-based company, which specialises in protecting sensitive informa
22-10-2026 14:27
Exposed Refrigeration Systems Raise Global Cybersecurity Concerns
Cybersecurity researchers at Forescout are drawing attention to the risks posed by exposed refrigeration control systems, warning that weaknesses in operational technology (OT) could have serious consequences for food supplies, business continuity and ot
22-10-2026 14:08
Keeper Security Launches AI-Powered Phishing Protection to Block Credential Theft
Keeper Security has introduced a new AI-powered phishing protection feature designed to prevent users from entering their credentials on fraudulent websites. Available through the Keeper Browser Extension, the new Phishing Protection capability uses a lo
22-10-2026 12:34
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.
22-10-2026 11:30
Security Serious Unsung Heroes Awards Celebrates 10 Years of Recognising Cybersecurity’s Hidden Heroes
Organised by Eskenzi PR, the tenth annual awards ceremony took place at St Barts Pub in London, bringing together cybersecurity professionals, educators, industry leaders and advocates to recognise those whose work often goes unnoticed. Unlike many indus
22-10-2026 09:57
Enterprises keep buying software upgrades that IT thinks will make things worse
Survey of 2,018 IT heads at big firms points to a lack of leverage.
21-10-2026 21:48
Salt Security wins three InfoSec Innovator awards
Salt Security has won three categories at Cyber Defense Magazine’s 2026 Top InfoSec Innovators awards, recognising its work in agentic AI and API security. The company received the Most Promising Agentic AI Security Solution, Trailblazing AI-based Cybers
21-10-2026 14:40
PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
21-10-2026 02:12
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
20-10-2026 19:47
Best Cybersecurity Thought Leadership Agencies
The best cybersecurity thought leadership agencies help organisations turn expert insight into credible executive content, original research and influential industry commentary. For technical, practitioner-led thought leadership: Bora combines cybersecur
20-10-2026 14:09
Meta Muse exposes users' personal and business secrets when they share conversations
Meta is suspending the sharing feature while it investigates its privacy.
20-10-2026 12:33
PSA: Patch your Plex media server before someone hacks it
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
19-10-2026 19:39
ReactOS reaches major milestone with NTFS install support
ReactOS gains NTFS install support with new driver.
19-10-2026 18:30
OpenAI models hacked a crypto wallet and breached more websites
The actions could have resulted in criminal charges had humans been behind the keyboard.
16-10-2026 20:59
Forescout uncovers ROMULUS malware delivery platform behind ClickFix attacks
Forescout’s Vedere Labs has identified a previously undocumented malware delivery platform being used in ClickFix campaigns, alongside new delivery techniques associated with malware loaders linked to Vice Society ransomware activity. The findings, publi
16-10-2026 13:50
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
15-10-2026 20:32
Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
14-10-2026 21:35
Nearly Half of Organisations Report Unauthorised AI Agent Actions, Research Finds
Nearly half (49.8%) of organisations have confirmed or suspected that an AI agent took an unintended, unexpected or unauthorised action in the past year, according to new research from Salt Security. The findings, published in the company’s State o
14-10-2026 14:21
Anthropic warns small AI models could self-replicate through IoT devices
"Small weight-based replicators" could usher in a new generation of computer worms.
14-10-2026 12:55
Fake WatchGuard VPN site steals credentials, then serves the genuine signed client
Huntress researchers have uncovered an SEO-poisoning campaign that harvests SSL VPN credentials through a lookalike WatchGuard download page, then hands victims the real, validly signed installer from WatchGuard’s own CDN, leaving endpoint tools with not
14-10-2026 10:50
Zero Trust in Practice: Moving Beyond the Buzzword
Zero trust has become one of the most overused terms in security marketing, often applied to products that simply add another layer of network segmentation. This piece looks at what zero trust actually specifies according to its foundational standard, th
14-10-2026 10:31
Vega Appoints Category Builder Scott Simkin as Chief Marketing Officer to Define the Post-SIEM Era
Vega, the pioneer of Agentic Cyber Defense, today announced the appointment of Scott Simkin as Chief Marketing Officer. Simkin joins as Vega II unleashes the best model trained for cyber defense to transform every alert, across all data sources, into a c
14-10-2026 10:29
Certes wins Frost & Sullivan PQC recognition for decoupling encryption from infrastructure
Certes has received Frost & Sullivan’s 2026 Global Enabling Technology Leadership Recognition in post-quantum cryptography (PQC), following an independent evaluation of vendors in the market. The recognition centres on a problem most security teams a
14-10-2026 09:57
Topgolf saved over $11.3 million after leaving VMware
Topgolf and VMware "ran deep" before the migration.
13-10-2026 21:33
LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys
Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI providers such as OpenAI, Anthropic and Google. The flaws could allow a user with minimal privileges to
13-10-2026 14:53
Legacy refrigeration controllers exploited in OT attack on hundreds of French supermarkets
A coordinated attack on the operational technology (OT) behind supermarket refrigeration has hit hundreds of stores across France, in what security experts are calling one of the clearest examples yet of cyber sabotage with physical consequences. Retaile
13-10-2026 10:31
Leading digital change when nobody prepared you for it
By Louise John, Head of IT Service Delivery at Virgin Active For IT managers, unexpected projects and changing business priorities are normal part of the job. You might have spent months planning your team’s workload, but only to be told with littl
12-10-2026 13:51
DTX + UCX 2026: Ingram Micro on Unlocking AI and Cloud Without Losing Control
Ahead of their participation at DTX + UCX London 2026, Lee Robson, AWS Greenfield Practice Lead at Ingram Micro shares what the company will be showcasing at the event and explains what trends will impact the channel in the year ahead. How is Ingram Micr
12-10-2026 11:48
PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
"The current decline may be just the beginning of a new downward cycle."
09-10-2026 18:54
Attackers exploit AhsayCBS backup flaws to deploy disguised crypto miners
Attackers are exploiting two newly disclosed vulnerabilities in AhsayCBS, the management console for Ahsay’s cloud backup software, to take over servers and quietly run cryptocurrency miners, according to researchers at Huntress. AhsayCBS (Cloud Backup S
09-10-2026 11:27
WorkNest Secure Achieves CREST STAR-FS Accreditation for Red Teaming
WorkNest Secure has achieved CREST Simulated Targeted Attack & Response for Financial Services (STAR-FS) accreditation, recognising its ability to deliver intelligence-led red teaming assessments for organisations operating in high-risk and regulated
08-10-2026 15:50
Global cyber attacks up 48% as ransomware and phishing climb, Check Point finds
Organisations worldwide faced an average of 2,803 cyber attacks per week in September 2026, up 16% on August and 48% on the same month last year, according to new data from Check Point Research. The figures point to sustained growth rather than a one-off
08-10-2026 13:42
Filigran announces speakers for first THREAD event
Filigran has announced the speaker line-up for THREAD, its first annual event for the cyber defence and threat intelligence community, taking place in Paris on 15 October. The free, one-day gathering at Les Jardins de Saint-Dominique will feature speaker
08-10-2026 13:03
Core to Cloud Appoints David Brown as Managing Director
UK cybersecurity specialist Core to Cloud has appointed David Brown as Managing Director, strengthening its leadership team as the company looks to expand its managed security services business. Brown brings more than 20 years of experience across cybers
08-10-2026 12:18
Digital IDs and the AI threat: verification must evolve, not just digitise
By Marc de Beaucorps, Co-founder and CEO of Finovox The UK’s rollout of new digital IDs is being pitched as a straightforward upgrade involving safer age checks, smoother access, and fewer fakes. But from a fraud perspective, “simpler” can be a dangerous
08-10-2026 10:21
No EDR, no problem: how Huntress rebuilt an Akira ransomware attack from forensic leftovers
Incident responders rarely get to watch an attack from the beginning. More often, security tooling arrives after the damage is done, either as part of the response or because a rollout was still underway when the attackers struck. That was the position H
08-10-2026 10:13
When everything looks normal: why context, not more alerts, is the next frontier for security operations
Security awareness has long relied on teaching people to spot the obvious warning signs. Steve Povolny, Vice President of AI Strategy & Security Research at Exabeam, says attackers have been studying the same lessons. “The security industry has spent
08-10-2026 09:35
Tines Named Headline Sponsor of CSIDES 2026 in Weston-super-Mare
Tines has been announced as the headline sponsor of CSIDES 2026, a community-focused cyber security event taking place at the Grand Pier in Weston-super-Mare on the 9th October. Organised by not-for-profit organisation Defend Together CIC, CSIDES aims to
08-10-2026 08:31
Power BI phishing campaign drops rogue ScreenConnect clients
Attackers are abusing Microsoft Power BI to host phishing lures that slip past email security, before dropping multiple rogue ScreenConnect clients on victims’ machines to secure persistent remote access, according to new research from Huntress. The camp
07-10-2026 14:20
The trust gap that AI watermarking can’t close
By Alex Laurie, GTM CTO, Ping Identity Generative AI has made content creation effortless, but establishing where content originates – and whether it can be trusted – remains a critical security challenge. While AI vendors are introducing dig
07-10-2026 13:21
Middle managers want tighter human oversight of AI than their bosses, TeamViewer research finds
Executives may be more relaxed about handing IT decisions to AI than the managers who answer to them, according to new research from TeamViewer. The study found that 46% of middle managers want a human involved when AI resolves IT issues that could affec
07-10-2026 12:53
Verify it, don’t assume it: why untested security controls are making life easy for attackers
This year’s Cybersecurity Awareness Month theme, “Don’t Make It Easy for Them”, is usually read as advice for individuals. Cynthia Overby, director of strategic security solutions, ZCOE, at Rocket Software, says it should be read just as closely in the b
07-10-2026 11:31
Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
06-10-2026 19:21
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
The reports of OpenAI agents harming third-party sites keep coming.
06-10-2026 12:21
Licensing costs driving 90 percent of VMware users to explore options: Survey
Users want to "reduce risk and avoid unnecessary disruption" while making changes.
06-10-2026 12:00
ASOS app turned into ransom note as hackers claim Snowflake breach
ASOS customers were left alarmed this morning after the retailer’s own mobile app delivered a push notification claiming the company had been hacked and threatening to leak data unless it opened negotiations with the attackers. The notification, titled “
06-10-2026 11:32
Tenant isolation becomes a buying criterion as FusionAuth opens UK office
Customer identity and access management (CIAM) provider FusionAuth has established its first dedicated European sales team, based in the UK, as enterprises across the region push for tighter control over where identity data lives and how it is isolated.
06-10-2026 10:20
UK public sets limits on AI autonomy as security concerns persist
A nationally representative survey of 2,000 UK adults, commissioned by cybersecurity PR agency Eskenzi PR and conducted by Censuswide, found that 84% would be comfortable giving an AI agent moderate, low or no control over their day-to-day lives. More th
06-10-2026 10:06
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Trust gaps in the new protocol spread malicious prompts from one agent to another.
05-10-2026 22:26
Q&A With Oliver Simonnet at CultureAI: AI Security In 2026: Most Organisations Deploy AI And Hope For The Best
Over the past few years, AI has gone from something understood and used by a select few to a cornerstone of almost every organisation. As businesses race to adopt new models, tools and autonomous agents, security and governance are struggling to keep up.
05-10-2026 14:39
Prime Big Deal Days: scammers stock up early as Amazon impersonation attacks nearly triple
For millions of shoppers, Prime Big Deal Days on 6 and 7 October are about grabbing a bargain before the festive rush. For cybercriminals, it is harvest season, and they’ve laid the groundwork well in advance. Two separate studies published ahead o
05-10-2026 13:57
Denmark’s CPR breach exposes 8.8 million people as experts warn over trusted third-party access
Personal details belonging to around 8.8 million people have been exposed in a breach of Denmark’s Central Person Register (CPR), after unauthorised parties abused a Danish company’s legitimate access to the national civil registration system, authoritie
05-10-2026 13:32
Cybersecurity Awareness Month “cannot be the strategy”: why awareness must become a year-round capability
Every October, security teams roll out refreshed training, posters and phishing simulations. But according to Rob Gregory, CISO at Optiv, organizations that treat the month as the centerpiece of their awareness efforts are missing the point. “I believe C
05-10-2026 12:53
A familiar face is no longer proof: rethinking social engineering defence for the deepfake era
Deepfakes have spent much of their short history being treated as a curiosity. According to Anne Cutler, cybersecurity expert at Keeper Security, that complacency is now a risk in itself. “For many people, deepfakes still feel like an internet novelty –
05-10-2026 11:52
Apple changes full-disk access permissions to curb abuse from AI agents
Meta says FDA isn't sufficient to Muse reading messages. Apple begs to differ.
02-10-2026 23:03
Ship fast, verify independently: keeping application security in step with AI-written code
AI coding assistants have transformed how quickly software can be built, but they have also intensified a long-running tension between development speed and security assurance. “There’s an awkward reality coming to light in the cybersecurity world:
02-10-2026 14:51
Shadow AI and the permissions problem: what to check before handing AI the keys
AI tools have moved from novelty to daily habit with remarkable speed, and for many people they are now as much a part of the working day as email. For Corey Nachreiner, CSO at WatchGuard Technologies, that makes a few simple questions more urgent than e
02-10-2026 13:11
Cybersecurity Awareness Month: AI agents are users too, and they need governing like it
For more than two decades, Cybersecurity Awareness Month has centered on people: the employee who might click a malicious link, reuse a password or approve a suspicious login. This October, as the campaign runs under the banner “Don’t Make It Easy for Th
02-10-2026 12:53
Malicious Email Could Hijack AI Agent and Access Connected Accounts
Security researchers have uncovered a now-fixed vulnerability in agentic AI platform Manus that could have allowed attackers to hijack an AI agent through a single malicious email and potentially access a user’s connected accounts. Researchers at Salt La
02-10-2026 11:28
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
It has been a bad month for federal government cybersecurity.
01-10-2026 20:28
Memory executives expect RAM shortage to continue through 2028
Prices for memory sold for 2027 "are much higher than 2026 prices."
01-10-2026 17:49
RMM abuse behind 45% of endpoint incidents as Huntress publishes inaugural Tragic Quadrant
Huntress has published the Huntress Tragic Quadrant, a ranking of the cyber tactics its Security Operations Center (SOC) is detecting and shutting down most often, plotted against what the company calls “pucker factor”: how close each tactic
01-10-2026 13:47
Huntress and ALSO partner to put managed security in reach of more European MSPs
Huntress has signed a pan-European distribution partnership with ALSO, giving value-added resellers (VARs) and managed service providers (MSPs) in 31 countries a new route to its Agentic Security Platform. The cybersecurity company, which protects more t
01-10-2026 08:31
Exabeam Pushes The “Agentic SOC” Into The Cloud And On-Premises, With Analysts Kept In The Loop
Security operations centres are facing a two-sided problem. Attackers are increasingly automating their campaigns, while inside the business, AI agents and autonomous workflows are multiplying faster than most security teams can track. Exabeam’s an
01-10-2026 04:07
Attackers have been exploiting critical Zimbra flaw to steal emails
A simple email gives the attackers the ability to remotely inject OS commands.
30-09-2026 20:44
Attacker signs up as a member to plant webshells on parks and recreation platform, hunts for card data
Security researchers at Huntress have detailed a multi-stage intrusion in which a threat actor compromised three web servers belonging to a popular recreation management platform used by local municipalities and parks organisations, planting webshells an
30-09-2026 15:26
CyberASAP Celebrates 10th Anniversary with Special Event Exploring Future of UK Cyber Security Innovation
In 2026, the Cyber Security Academic Startup Accelerator Programme (CyberASAP), which is funded by the UK Government’s Department for Digital, Culture, Media and Sport (DCMS) and delivered by Innovate UK, celebrates its 10th anniversary. Over the p
30-09-2026 12:57
Continuous Penetration Testing: Why Annual Pen Tests Are a Compliance Checkbox, Not a Security Strategy
An annual penetration test reliably satisfies an audit requirement but tells you comparatively little about your actual exposure for the other eleven months of the year. This piece covers what an annual test does and does not actually evidence, why the c
30-09-2026 11:29
AI Is Making Software Cheaper to Attack. Defenders Need to Change the Price
By Ansgar Dodt, VP Product Management for Software Monetization at Thales Not every piece of software is worth attacking. Traditionally, that has offered software vendors a degree of protection. Reverse engineering takes time, specialist expertise and pe
30-09-2026 11:24
Cloudflare plans to issue quantum-safe TLS certificates
The move will be part of a major overhaul of the ecosystem for website authentication.
30-09-2026 11:15
How much does the average UK SME spend on cybersecurity each year?
There is no single official figure for what a UK SME spends on cybersecurity today, because the UK Government stopped collecting detailed cybersecurity investment figures after its 2019 survey. The last official benchmark found that micro and small busi
30-09-2026 11:12
How Is AI Improving These 3 Tech Sectors?
Business owners everywhere are embracing AI and its capabilities more than ever, and for good reason. They can speed up processes, minimize mistakes, and even save money, but is this all it is doing? Not in the slightest. In fact, this is only touching t
30-09-2026 11:07
Why AI won’t fix your cybersecurity problem
James Gillies, Head of Cyber Security at Logicalis UKI There is no escaping the fact that AI is creating significant opportunities for cybersecurity teams, from analysing security data and identifying suspicious activity to accelerating detection, respon
29-09-2026 15:13
Proton brings Microsoft 365 to Easy Switch for Business as security leaders weigh US ‘kill switch’ risk
Proton has extended Easy Switch for Business, its guided migration tool, to Microsoft 365. Organisations can now move email, calendars and contacts from Outlook or Google Workspace to Proton’s end-to-end encrypted platform without taking their teams offl
29-09-2026 10:58
Attackers weaponise ChatGPT Custom GPTs to deliver RAT via eight-stage ClickFix chain
Threat actors are abusing ChatGPT’s Custom GPT feature to funnel victims into a ClickFix attack that ends with a full-featured remote access trojan (RAT), according to new research from Huntress. The attackers created a Custom GPT titled “Plus 5.6”, desi
29-09-2026 10:44
New Guide from Filigran Highlights the Many Routes Women Take into Cyber Threat Intelligence
A new guide featuring the experiences of 16 women working in cyber threat intelligence (CTI) is challenging the idea that professionals need a conventional technical background to enter the field. Published by threat management company Filigran, Women in
28-09-2026 14:52
James Moore, CultureAI Q&A: AI Security And Governance: Why Most Organisations Are Flying Blind
AI adoption is moving faster than most organisations can govern it. It is a familiar line by now, repeated often enough to sound routine, and that is part of the problem: it is still true, and still understated. As James Moore, CEO of AI security and gov
28-09-2026 10:46
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
Ads appearing all over the Internet are trying to scam people.
25-09-2026 19:38
Attackers build “silent” cryptominer on victim’s machine and give themselves away
Security researchers at Huntress have uncovered an unusual attack in which a threat actor compiled a cryptocurrency miner directly on a victim’s computer, rather than simply dropping a ready-made one, and in doing so generated so much activity that the i
25-09-2026 12:20
OpenAI agent breached Australia’s Medicare portal – and nobody noticed for three months
An autonomous AI agent built by OpenAI gained unauthorised access to non-public files on an Australian government Medicare portal in June, but Canberra was only told about it in September, in what is being described as the first known case of an AI agent
24-09-2026 12:26
There's a new way to break RSA that's faster than anything we've seen before
Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.
24-09-2026 11:15
Zero-day hackers ditch exploits for a fake image file in new DarkMe campaign
A threat group best known for exploiting previously unknown flaws in WinRAR and Windows has switched to a much simpler method: an email link to what appears to be an image. New research from Huntress details a 2026 campaign delivering DarkMe, a remote ac
23-09-2026 10:52
CRA Reporting Is Live: What Manufacturers, Vendors, and Distributors Need to Know
By Matthew Brady, Senior Security Engineering Manager, Black Duck As of September 11, 2026, Article 14 of the EU Cyber Resilience Act (CRA) is in force. Manufacturers, importers, and distributors of products with digital elements sold into the EU must no
23-09-2026 10:43
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
22-09-2026 19:45
Microsoft disrupts AI-assisted platform that compromised 12,000
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
22-09-2026 19:45
IT mistake erases 11 years of viewing history for hospitals’ maternity records
The English hospitals recovered patient care data only.
22-09-2026 16:55
Only 13% of OT Network Segments Keep Operational Technology Isolated
New research from Forescout Vedere Labs has found that critical operational and medical devices are frequently sharing network segments with IT and IoT assets, potentially giving attackers more opportunities to move laterally following an initial comprom
22-09-2026 13:57
Salt Security adds native AI detection and response to agentic security platform
Salt Security has expanded its Agentic Security Platform with native AI Detection and Response (AI-DR) capabilities designed to connect attacks targeting large language models with subsequent activity across MCP servers, tools and APIs. The new capabilit
22-09-2026 13:38
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
A simple ClickFix attack is only one way to completely hijack the new agent.
21-09-2026 22:24
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google’s threat intelligence group said it had a mole inside TeamPCP's inner circle.
20-09-2026 11:07
Filigran Backs Security Serious Unsung Heroes Awards as New Sponsor
Nominations are open for the 2026 Security Serious Unsung Heroes Awards, celebrating the people working behind the scenes to make the UK safer and better protected from cyber threats. This year’s awards will take place on 20 October at Balfour St Barts i
18-09-2026 10:27
Four AI Agent Security Risks Organisations Can’t Afford to Ignore
AI agents are quickly moving from experimentation into everyday business operations. Unlike traditional generative AI tools that wait for a user to ask a question, agents can take action: accessing systems, processing information, communicating with appl
18-09-2026 09:19
LLMs respond differently to harmful prompts when AI watermarking is used
SynthID can cause models to follow harmful instructions they would otherwise refuse.
17-09-2026 18:33
New Settra Ransomware Strain Deploys MeshAgent RMM for Persistence
Researchers at Huntress have detailed two ransomware incidents involving Settra, a relatively new strain first observed in June, and revealed a consistent set of post-compromise tactics defenders can use to spot the threat before encryption takes hold. I
17-09-2026 16:26
When Everyday Habits Become an Invisible Security Risk
By James Mackay, CEO, MetaCompliance When security teams think about their organisation’s attack surface, they’re usually focused on technology. Where could an attacker get in? What’s exposed? What hasn’t been updated or configure
17-09-2026 14:25
Could an Email You Never Read Hijack Your AI Assistant?
Cybersecurity awareness has traditionally focused on teaching people not to click suspicious links, open unexpected attachments or hand over their credentials. However, the growing use of an AI assistant inside workplace email systems is creating an atta
17-09-2026 12:31
source : arstechnica, darkreading, itsecurityguru