Enterprise
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released emergency patches for two critical remote code execution vulnerabilities tracked as PHP2Shell.
Enterprise Tech
Cloud, cybersecurity, SaaS and B2B innovation.
Enterprise
Compromised security certificates blocked in Chrome, Firefox
Private keys for eight intermediate certificates from Indian digital trust provider eMudhra were compromised, prompting Chrome and Firefox to block the affected certificates to prevent website impersonation.
Enterprise
ClickFix has never been bigger, and AI tools are its most convincing lure yet
ClickFix malware attacks are escalating, with cybercriminals leveraging fake AI installers and trusted platforms to distribute malware.
Enterprise
AI Guardrails Aren’t Stopping Criminal Hackers
Criminal hackers worldwide are exploiting agentic AI systems, including Anthropic's Claude, to execute cyberattacks despite built-in safety guardrails.
Enterprise
From feral to fiduciary: making AI agents serve your interests
Organizations deploying AI agents must implement trust-based governance frameworks to manage autonomy and risk, balancing innovation with oversight through real-time monitoring and performance scoring.
Enterprise
eMudhra’s Security Key Flaw: What Went Wrong And Why Google, Mozilla Stepped In
Digital trust company eMudhra's eight certificate authorities suffered a critical security flaw where private keys could be reconstructed from public certificates due to weak key generation, prompting Google, Mozilla, Apple and Microsoft to block affected certificates.
Enterprise
OneDrive gives Macs a million things to keep in sync
Microsoft is raising OneDrive's macOS sync limit to one million items, matching Windows, and adding new Copilot features including file analysis, folder organization, and Hero Links for simplified sharing.
Enterprise
AI 'antidetect' browsers are making scams, fraud, and influence operations harder to spot
AI-powered antidetect browsers are enabling scams, fraud, and influence operations while evading detection, creating new security challenges.
Enterprise
Malaysia Rolls Out Tokenised Bond Platform for Around-the-Clock Settlement
Bank Negara Malaysia launched SSDS+, a distributed ledger platform for tokenized bond issuance and 24/7 settlement using central bank digital money.
Enterprise
SBI Reports Suspected Data Exposure Affecting 3,897 Customer Records
India's State Bank of SBI reported suspected exposure of 3,897 customer records containing names, addresses, and loan information after alerts from threat intelligence providers.
Enterprise
A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse
Security researchers discovered a design flaw in Meta's Muse AI assistant's share links that exposed users' personal conversations, prompting the company to suspend the feature.
Enterprise
eMudhra intermediate CA certificates compromised: What happened, who is affected and what users need to know | Explained
CERT-In warned that eight eMudhra intermediate CA certificates were compromised due to weak cryptographic keys, threatening encrypted communications.
Enterprise
What’s the eMudhra security scare that has rattled the internet? All you need to know
Google, Mozilla, Apple and Microsoft revoked eight digital certificates from Indian firm eMudhra after discovering they were issued with critically weak secret keys.
Enterprise
Want a higher paying tech job? Employers seek AI fluency
Employers are prioritizing AI fluency in tech hiring and offering premium salaries for AI expertise, with 72% of surveyed hiring managers planning to increase pay for relevant AI skills.
Enterprise
Apple blocks web certificates that could be used by scammers, but Mac vulnerability remains
Apple revoked eight web security certificates to prevent scammer misuse, but a cryptography engineer flagged that macOS may continue trusting the compromised certificates due to lack of revocation checks.
Enterprise
eMudhra Takes Remedial Action After Security Researcher Flags Weak Intermediate CA Keys
eMudhra found eight compromised CA certificates with weak keys; the company is taking remedial action after researcher disclosure, with seven never deployed and one unused for end-entity issuance.
Enterprise
AI has 'potential' to turn script kiddies into sophisticated infrastructure attackers
Security experts warn that AI has the potential to empower less-skilled attackers to target critical infrastructure like power grids and water systems, though this threat is not yet fully realized.
Enterprise
Microsoft Proposes Guardian Agents to Secure Enterprise AI
Microsoft proposes Guardian Agents—AI security monitors—to oversee and control other AI agents in enterprises, warning that autonomous systems pose insider threats even when not compromised.