Google has announced that it will be switching from KYBER to ML-KEM in its Chrome web browser as part of its ongoing efforts to defend against the risk posed by… Read More »Google Chrome Switches to ML-KEM for Post-Quantum Cryptography Defense
Since launching ChatGPT in 2022, OpenAI has defied expectations with a steady stream of product announcements and enhancements. One such announcement came on May 16, 2024, and for most consumers,… Read More »How to Investigate ChatGPT activity in Google Workspace
Cryptocurrency exchange Binance is warning of an “ongoing” global threat that’s targeting cryptocurrency users with clipper malware with the goal of facilitating financial fraud. Clipper malware, also called ClipBankers, is… Read More »Binance Warns of Rising Clipper Malware Attacks Targeting Cryptocurrency Users
SolarWinds has released fixes to address two security flaws in its Access Rights Manager (ARM) software, including a critical vulnerability that could result in remote code execution. The vulnerability, tracked… Read More »SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks
Cybersecurity researchers are continuing to warn about North Korean threat actors’ attempts to target prospective victims on LinkedIn to deliver malware called RustDoor. The latest advisory comes from Jamf Threat… Read More »North Korean Hackers Target Cryptocurrency Users on LinkedIn with RustDoor Malware
A now-patched critical security flaw impacting Google Cloud Platform (GCP) Composer could have been exploited to achieve remote code execution on cloud servers by means of a supply chain attack… Read More »Google Fixes GCP Composer Flaw That Could’ve Led to Remote Code Execution
The PCI DSS landscape is evolving rapidly. With the Q1 2025 deadline looming ever larger, businesses are scrambling to meet the stringent new requirements of PCI DSS v4.0. Two sections… Read More »Master Your PCI DSS v4 Compliance with Innovative Smart Approvals
Imagine this… You arrive at work to a chaotic scene. Systems are down, panic is in the air. The culprit? Not a rogue virus, but a compromised identity. The attacker… Read More »From Breach to Recovery: Designing an Identity-Focused Incident Response Playbook
Apple has filed a motion to “voluntarily” dismiss its lawsuit against commercial spyware vendor NSO Group, citing a shifting risk landscape that could lead to exposure of critical “threat intelligence”… Read More »Apple Drops Spyware Case Against NSO Group, Citing Risk of Threat Intelligence Exposure
Cybersecurity researchers have warned of ongoing phishing campaigns that abuse refresh entries in HTTP headers to deliver spoofed email login pages that are designed to harvest users’ credentials. “Unlike other… Read More »Cybercriminals Exploit HTTP Headers for Credential Theft via Large-Scale Phishing Attacks