Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
A Russian national has been charged with conspiracy to commit unauthorized computer access in connection with the Void Blizzard cyber-espionage campaign, which targeted companies and organizations in the US and elsewhere.
Great Marlow School in Buckinghamshire, England, was closed for the second day due to a cybersecurity incident affecting its ICT systems, with only students sitting exams permitted to attend.
Alert fatigue is becoming a security threat due to the huge volume of alerts generated by security tools, leading to burnout and reduced security efficiency.
The Miasma credential-stealing attack framework's source code was briefly leaked on GitHub, potentially leading to increased supply-chain attacks on the open-source ecosystem.
The JDY botnet, linked to Chinese threat actors, has expanded its targeting of US military networks, growing from 650 to over 1,500 compromised devices.
Anthropic has rolled out Claude Fable 5, a new AI model with strict safeguards, available for a limited time to Pro, Max, and Enterprise customers.
Microsoft released fixes for over 200 security flaws, including one bug under active attack and a 'wormable' flaw in the Windows core.
CISA has ordered federal agencies to prioritize vulnerability patching based on four criteria, aiming to patch smarter and reduce the window for exploitation.
CISA has introduced a new directive requiring federal agencies to patch certain cyber vulnerabilities within three days to address the heightened threat environment posed by AI.