Chargebacks only capture a narrow slice of fraud losses, hiding bigger issues that affect revenue, customer experience, and long-term profitability.
Healthcare professionals are turning to unsanctioned AI tools to manage crushing workloads, creating dangerous visibility gaps that compound ransomware recovery challenges. Experts say denial is no longer viable — containment and discovery are now the priority.
The OWASP Foundation has released updated AI security guidance splitting recommendations into generative AI and agentic AI tracks, while cataloguing 21 data security risks and expanding its solutions matrix from 50 to more than 170 providers.
The Kimwolf IoT botnet has been hammering the I2P anonymity network since early February 2026 after its operators attempted to enroll 700,000 infected devices as network nodes, overwhelming the system and cutting connectivity roughly in half.
A new phishing-as-a-service platform called Starkiller dynamically loads authentic login pages through a reverse proxy, capturing credentials and MFA tokens in real time while rendering traditional detection methods largely ineffective.
RSAC 2026 placed artificial intelligence front and center, with more than two-thirds of sessions featuring an AI component, yet the conference's own theme — 'The Power of Community' — served as a pointed reminder that human oversight remains non-negotiable. A conspicuous absence of the US federal government added further tension to an already charged event.
The compromise of the Axios JavaScript library by suspected North Korean threat group UNC1069 exposes how sophisticated, slow-burn social engineering campaigns are being scaled to target open source maintainers with massive downstream reach.
Open-source intelligence and breach data link Kimwolf botnet operator 'Dort' to Jacob Butler, an Ottawa, Canada resident born in August 2003, who has since orchestrated DDoS attacks, doxing, and a swatting incident against those who exposed the botnet.
Autonomous AI assistants like OpenClaw are transforming productivity for developers and IT workers, but security researchers warn they are simultaneously creating one of the largest attack surfaces the internet has ever seen.
A cluster of software supply chain incidents — including Anthropic's accidental publication of over 500,000 lines of Claude Code source, plus attacks on Trivy, Axios, and KICS — reveal systemic failures in how development pipelines are secured.