Security Bulletin

The AI-powered work platform helps organizations securely identify and access internal enterprise data as part of business processes and workflows.

The rush to say "yes" allows cybersecurity teams to avoid hard conversations with business stakeholders but also risks losing their ability to effectively protect organizations.

The new administration moved quickly to remove any constraints on AI development and collected $500 billion in investment pledges for an American-owned AI joint venture.

Advanced persistent threat group PlushDaemon, active since 2019, is using a sophisticated modular backdoor to collect data from infected systems in South Korea.

The pardon comes after 11 years in prison for Ross Ulbricht, who was sentenced to life without parole on several charges, including computer hacking, distribution of narcotics, and money laundering.

The vulnerability could enable attackers to use nested archives to bypass Windows security warnings.

Attackers drop infostealer malware that grabs credentials, web browser data, and crypto wallets.

The flurry of non-human identity attacks at the end of 2024 demonstrates extremely strong momentum heading into the new year. That does not bode well.

The study, which analyzed tens of thousands of prompts, revealed that nearly 8.5% of business users may have disclosed sensitive information, with 46% of these incidents involving customer data such as billing and authentication details.

The report, prepared by the Insikt Group, the research division of cybersecurity firm Recorded Future, and based on data from dark web sources, e-commerce transactions, and threat actor behavior analysis, identified e-skimming, scam e-commerce...

Addressing the Senate Intelligence Committee, Ratcliffe called the statute “indispensable” for national security, noting that it provides over half of the actionable foreign intelligence used by the president.