Security Bulletin

A large-scale malvertising campaign is using fake websites for Solana, Luno, and TradingView, employing malicious JavaScript to assemble malware directly in the user's browser.

Phishing campaigns targeting financial institutions are evolving from credential harvesting for later use to real-time account hijacking, based on information published by The Hacker News.

Following insights from Bleeping Computer, threat actors are leveraging email addresses exposed in data breaches, previously leaked by the ShinyHunters extortion group, to perpetrate a new sextortion email campaign demanding $2,000 in Bitcoin.

An FBI agent explains how the mulitnational law-enforcement Operation Cronos was successful in disrupting the largest ransomware group of its time.

The Click To Pray app, endorsed by the Pope and used by hundreds of thousands worldwide, was leaking user names and email addresses for months.

Bleeping Computer reports that the parcel delivery company OnTrac has experienced a data breach, potentially exposing customer personal details following a cyberattack on its corporate network.

Modernising legacy technology is a strategic opportunity for resilience. This report provides a practical governance framework for governments and enterprises to manage system lifecycles and build a secure, innovative digital future.

Cisco’s journey to 90% Enterprise AI adoption demonstrates that long-term success comes from prioritizing trusted data, secure platforms, and reimagined workflows.

As attackers shift from password theft to session and token theft to bypass multifactor authentication controls, organizations must move beyond login security and protect authenticated sessions.

Confidence in autonomous security tools is declining, and here's why.

As Cisco closes FY26, I’m reflecting on a year of massive innovation—from WebexOne and the Cisco 360 launch to our new partner profitability programs. We’ve built the foundation; now, as we head into FY27, it’s time to go all in on AI-powered growth.

Block rate is not a proxy for detection coverage against these threats