SecurityWeek (2 hours ago)
Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics.
Read the full story on SecurityWeek.
Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.
Interesting research: Abstract: Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from scratch. For such an agent, the hundredth instance of a familiar puzzle costs as much time and compute as the first.
Trading standards officers say AI is “super-charging” existing scams through clones and fake websites.
A fake WatchGuard VPN download website stole administrator credentials before delivering the genuine signed installer, potentially exposing corporate networks without deploying malware.
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers.
CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag.
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.
Opaque Systems has developed technology that lets AI systems use sensitive data while keeping it protected by the underlying hardware.
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets.
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack.
72 active sources
27 Turkish · 45 English
All sources
