Enterprise
Cookie theft: how fraudsters get the digital key to your accounts
Session cookie theft enables fraudsters to hijack user accounts through 'session hijacking,' a form of cybercrime that bypasses login credentials.
Enterprise Tech
Cybersecurity
Cloud, cybersecurity, SaaS and B2B innovation.
Enterprise
Your DLP tool is probably writing the incident report, not stopping the incident
A Cloud Security Alliance survey reveals that enterprises with data loss prevention tools continue to suffer breaches, with GenAI exacerbating the gap between perceived and actual security control.
Enterprise
Google is quietly linking your phone number to other Android accounts
Google automatically links phone numbers to Android accounts and inherited by new Google accounts, raising privacy concerns about data linkage.
Enterprise
When the sandbox breaks: Why AI model containment is the next enterprise security discipline
OpenAI's red-team testing reveals that AI model containment in enterprise settings requires planning for scenarios where agents exceed their intended boundaries.
Enterprise
Explainer Series: PHP2Shell, explained in five parts
Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619, both rated 9.2) could allow attackers to execute arbitrary code on servers running PHP, which powers approximately 70% of websites.
Enterprise
Capcom confirms data breach that affected 11.7 million users
Capcom confirmed a data breach affecting 11.7 million users; the Capcom ID service remains operational but users may face increased phishing attack risks.
Also covered by 1 other outlet
Enterprise
Cybersecurity Awareness Week: How to remove your personal data from the internet, and why Apple’s tools alone aren’t enough
Apple's privacy tools like App Tracking Transparency and iCloud Private Relay limit future tracking but cannot remove data already collected by brokers across hundreds of databases.
Enterprise
AWS says its AI security agent fixes 89% of bugs — but there’s a catch
AWS launched Continuum, an AI security agent claiming an 89% success rate at detecting and fixing code vulnerabilities, though industry observers questioned the benchmark validity.
Enterprise
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
BlackX UEFI bootkit exploited the Baton Drop vulnerability to bypass Secure Boot and disable security solutions from Kaspersky and Avast in an espionage campaign.
Enterprise
PHP2Shell: Who Is At Risk And How Can Businesses Stay Safe?
Critical vulnerabilities in PHP itself called PHP2Shell allow unauthenticated attackers to execute code on vulnerable servers; fixes were released October 21, 2026.
Enterprise
GMO asks Japan to use new cyber defence powers after hack
GMO Internet Group has requested Japan's government to deploy new active cyber defence powers against hackers who breached one of its services and demanded ransom.
Enterprise
PHP2Shell: Security vendors race to contain a critical vulnerability as exploitation attempts spread
Security vendors including Palo Alto Networks, Check Point, and Cloudflare are responding to active exploitation of a critical PHP2Shell vulnerability, with reports of AI-assisted post-exploitation activity and regional attack attempts.
Enterprise
What to know about the AI-detected security bug impacting wide swaths of the internet
The PHP Foundation and FBI warned of significant security vulnerabilities in PHP, the scripting language powering the majority of websites worldwide.
Also covered by 1 other outlet
Enterprise
PHP Foundation 'under-funded' with one full-time staff member, director says
The PHP Foundation operates with minimal resources, including only one full-time staff member, despite PHP's critical role in powering the internet.
Enterprise
Understanding PHP2Shell vulnerabilities and reducing risk while you patch
Critical PHP vulnerabilities disclosed this week pose security and business continuity risks; article discusses mitigation strategies while systems are patched.
Enterprise
Cybersecurity awareness in the age of AI: Why human oversight still matters
A Securonix executive discusses the need for human oversight in cybersecurity, citing warnings from AI leaders about risks during a UN Security Council meeting.
Enterprise
Amazon ends its six-year legal fight with former AWS managers over alleged data center kickbacks
Amazon has settled a six-year legal dispute with two former AWS managers over alleged improper payments related to data centre deals, with both parties acknowledging ethical violations.
Enterprise
Password, Please: Border Searches of Laptops, Phones Up 32% This Year
U.S. border device searches have increased 32% this year, with more travelers having their laptops and phones checked upon entry.