Even after PHP2Shell, blast radius matters more than a CVSS score
Security analysis explains how limiting service account access reduces breach damage more than patching alone, using PHP2Shell vulnerability as case study.
Stories tagged by our AI curator.
Security analysis explains how limiting service account access reduces breach damage more than patching alone, using PHP2Shell vulnerability as case study.
CrowdStrike reports that the cybercrime group CHATTY SPIDER grew its attacks by 129% and targeted US law firms as nearly 90% of its victims.
Threat actors are actively scanning systems for a recently-disclosed critical vulnerability in Oracle E-Business Suite that remains unpatched on many networks.
Northstar Security AI launched with $7 million in funding to provide AI agents with contextual data to respond to security risks using a real-time Security Context Graph.
IIIT Hyderabad and India's NPCI signed an MoU to collaborate on cybersecurity research and workforce development for the digital payments ecosystem.
A US government-commissioned report warns that Chinese research activities near Pacific undersea cables pose sabotage risks to major tech companies like Google and Meta.
Bank of America warned customers against sharing banking credentials with AI assistants like Gemini, Claude, and ChatGPT, citing risks of unauthorized access and holding customers liable for resulting activity.
A Ukrainian national was sentenced to 70 months in prison for participating in ransomware attacks by Nefilim and Hive affiliates against hospitals, governments, and businesses globally from 2018 to 2021.
Cybersecurity firm CloudSEK reports that criminal group Mr Robot is renting out tech tools to target Indian banking customers.
GMO Group warns customers to disconnect systems after threat actor breaches its Onamae Desktop Cloud service and threatens ransomware attack.
Security researchers warn that hackers may impersonate IT support through Microsoft Teams chats to deceive users.
Dell Technologies is extending its cyber recovery tools to protect identity systems alongside data, addressing a growing gap as AI integrates data, identity, infrastructure and applications.
Hackers have targeted the U.S. Federal Election Commission website, raising concerns about transparency and election infrastructure integrity.
University of New Mexico Health Sciences Center experienced a ransomware attack that caused system outages and disrupted patient care and surgeries.
Bank of America warns customers against sharing banking passwords with AI assistants, emphasizing user responsibility for account activity.
Dell implements post-quantum cryptography at the firmware level to defend against future quantum computing threats to device authenticity and data security.
Researchers identify evidence of a large-scale surveillance campaign targeting Starlink users, particularly in nations where the service is prohibited or limited.
A credit card skimming group compromised an analytics script used by e-commerce platform Convertr to steal customer payment data during checkout.