Decentralized Finance (DeFi)
In a significant policy shift, the Department of the Treasury is expanding its "Project Fortress" initiative to include digital asset firms, providing them with the same high-level threat telemetry previously reserved for traditional tier-one banks. WASHINGTON, D.C. — The U.S. Department of the Treasury has officially opened
Artificial Intelligence (AI)
As the industry shifts toward "AI-First" defense, the two titans of Silicon Valley are taking different paths to the same goal: automating the discovery and patching of global software vulnerabilities. SAN FRANCISCO, CA — The battle for the future of cybersecurity has entered a restricted phase. Following the bombshell
Trending
A newly identified threat actor, UNC6783, is bypassing the "front door" of major corporations by targeting Business Process Outsourcing (BPO) firms. By leveraging fake Okta portals and hijacked Zendesk tickets, the group has successfully extorted dozens of high-value targets, exposing a critical failure in the Managed Perimeter. MOUNTAIN
Trending
Yesterday, Nextend confirmed that its update servers were compromised, leading to the distribution of backdoored versions of Smart Slider 3 Pro. With nearly a million sites affected across WordPress and Joomla, this is one of the most significant supply chain attacks of the year. BUDAPEST, HUNGARY — Security researchers at Patchstack
Trending
A sophisticated social engineering campaign dubbed "ClickFix" has pivoted to target macOS users, leveraging fake browser errors to trick victims into executing malicious scripts that bypass standard Apple security prompts. CUPERTINO, CA — For years, the prevailing wisdom suggested that macOS was a "walled garden" largely immune
Threat Intelligence
Researchers have uncovered a sophisticated spearphishing operation aimed at journalists and human rights defenders, leveraging custom spyware to exfiltrate private iCloud backups and Android device data. CAIRO — A new wave of targeted cyberattacks has been identified across the Middle East and North Africa (MENA), specifically focusing on members of the
Threat Intelligence
A sweeping new federal mandate blocks the authorization and import of networking equipment from high-risk foreign adversaries, targeting vulnerabilities used in state-sponsored botnets. WASHINGTON — The Federal Communications Commission (FCC) has issued an unprecedented order banning the import and sale of new consumer and enterprise routers manufactured in several foreign nations,
Trending
A novel Phishing-as-a-Service platform is leveraging Microsoft's device code flow to bypass multi-factor authentication and automate business email compromise at scale. REDMOND — Security researchers have identified a surge in high-velocity phishing campaigns powered by a new service called "EvilTokens." The platform specifically targets Microsoft 365 environments
Trending
The launch of "Mythos" and Project Glasswing raises legitimate questions about autonomous defense — and the risks that come with it. SAN FRANCISCO — Anthropic has unveiled "Mythos," its most capable AI model to date, alongside Project Glasswing — a dedicated cybersecurity initiative designed to use Mythos to identify
Threat Intelligence
U.S. intelligence and cybersecurity agencies have issued a joint advisory warning of a significant escalation in Iranian-linked cyber operations targeting the nation’s critical infrastructure. The coordinated alert from CISA, the FBI, and the NSA highlights a strategic shift from "episodic" disruptions to a "sustained and
Cybersecurity 101
Swift containment is one of the most critical phases of modern cybersecurity. In this blog post, we provide in-depth, accessible information about swift containment and its role in protecting organizations from evolving cyber threats. As cyber threats grow more sophisticated and attack surfaces expand across hybrid environments, organizations must respond