Enterprise
US government says hackers are now exploiting critical PHP web bugs
U.S. government warns that hackers are exploiting critical vulnerabilities in PHP, the software used in 70% of web applications.
Enterprise Tech
Cybersecurity
Cloud, cybersecurity, SaaS and B2B innovation.
Enterprise
Tailscale warns of SSH flaws allowing root privilege escalation
Tailscale has identified nearly a dozen security vulnerabilities that could enable credential theft, server crashes, and root privilege escalation, which the team is working to patch.
Enterprise
The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest
Huntress Labs has identified and ranked the most damaging business threats, highlighting attackers' growing abuse of legitimate IT tools and Microsoft 365 to bypass traditional defenses.
Enterprise
Check Point launches firewall-as-a-subscription to put advanced AI-era protection within reach of every organization
Check Point introduces a subscription-based firewall service with AI-powered threat prevention and management, eliminating upfront hardware costs for organizations of all sizes.
Enterprise
NSE chief asks brokers’ body to set up a task force against AI cyberattacks
NSE chief calls for task force against AI-driven cyberattacks, urging Indian stockbrokers to strengthen security and prepare for quantum computing threats.
Enterprise
Japan internet giant GMO says hackers posted stolen customer data
Japanese internet company GMO Internet is investigating an alleged data breach after suspected hackers posted stolen customer data from its cloud service.
Enterprise
Bitdefender’s new tool maps how attackers could reach critical systems
Bitdefender launches GravityZone Exposure Management, a tool that maps attack paths and shows how attackers could exploit vulnerabilities to reach critical systems.
Enterprise
Over 525,000 hit in massive University of Copenhagen data breach
Over 525,000 individuals affected in data breach at University of Copenhagen.
Also covered by 1 other outlet
Enterprise
When “isolated” doesn’t mean isolated: How to sandbox AI agents
Containers and default security measures are insufficient for isolating AI agents in enterprise environments; proper sandboxing requires multi-layer security policies across infrastructure.
Enterprise
Microsoft releases out-of-band Windows fixes with certificate updates
Microsoft released an out-of-band Windows certificate update for devices unable to access automatic updates, following a compromised eMudhra certificate incident. The patch addresses certificate trust list updates for Windows 10, 11 and Server 2025.
Enterprise
Israeli ad tech firm heavily targeted Starlink users, sources say
Researchers at Trend Micro discovered that an Israeli ad tech firm targeted Starlink users with unusually high numbers of ads, apparently to track their activity.
Enterprise
Dell extends cyber resilience to identity, AI environments and quantum-safe storage
Dell Technologies expanded its cyber resilience portfolio with PowerProtect software for identity systems, plus new AI environment services and quantum-safe storage capabilities.
Enterprise
Exclusive: FireMon unveils AI agents to handle the legwork behind firewall policy changes
FireMon unveiled FireMon Agentic AI, an AI agent system designed to automate firewall policy changes across multiple vendors and cloud environments.
Enterprise
The eMudhra incident is a trust problem, not a browser problem
A commentary by Checkmarx Research argues the eMudhra browser certificate vulnerability reveals deeper trust infrastructure issues beyond browser implementation.
Enterprise
Attack on email hosting provider for German far right party AfD exposed 345k accounts
A cyberattack on the hosting provider for Germany's AfD party exposed over 345,000 email addresses and a terabyte of confidential data in September.
Enterprise
CoinDCX admits Rs 152 crore loss after CEO dismissed breach claims
CoinDCX, an India-based crypto exchange, admitted to a Rs 152 crore loss after initially denying a security breach involving its deprecated wallet infrastructure.
Enterprise
Apple backports CoreGraphics zero-day patches to older iPhones
Apple backported security patches for a CoreGraphics zero-day vulnerability to older iPhones and iPads after the flaw was exploited in sophisticated targeted attacks.
Enterprise
Your Android phone may remember AI chats you thought you deleted
Researchers have developed a forensic tool that can recover deleted AI conversations from local AI apps on Android devices, raising privacy concerns about the persistence of supposedly erased chat data.