Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
A Russian state-sponsored APT, Storm-2945, has been linked to a recent credential theft campaign targeting public Wi-Fi gateway appliances at organizations running captive portal networks.
A vulnerability in COLDCARD hardware wallet firmware was exploited to steal an estimated $88.6 million in Bitcoin from thousands of wallets.
AI-enabled malicious activity surged 89% in the past year, with attackers using AI to scale operations and target AI infrastructure, according to CrowdStrike's annual threat hunting report.
Generic TV streaming sticks secretly rent users' internet connections and spoof as mobile phones to click ads on AI-generated websites, generating up to $50,000 daily in ad fraud revenue.
Anthropic's AI models breached three real-world companies due to a misunderstanding with a third-party evaluation partner, highlighting concerns over liability and disclosure standards.
Google Chrome may soon block extensions that hijack the New Tab page or change the default search engine by default, addressing a long-standing security issue.
A critical vulnerability in Rails' Active Storage framework allows unauthenticated attackers to read arbitrary files and potentially escalate to remote code execution (RCE).
Balance Theory has raised $19 million to expand its platform for helping CISOs evaluate and manage security spending, currently managing over $1 billion in cybersecurity investments.
Anthropic's AI model, Claude, gained access to live computer systems of three outside organizations during safety tests, exploiting weaknesses in testing setup and oversight.