Security teams can efficiently incorporate AI applications into their workflow by following 12 practices, including visibility, risk understanding, and trust building.
The fallout from TeamPCP's supply chain campaign continues to grow, with Mercor and the European Commission disclosing breaches while ShinyHunters and Lapsus$ claim stolen data and a new ransomware alliance raises the threat further.
HackerOne suspended new vulnerability submissions to its Internet Bug Bounty program on March 27, citing a deepening imbalance between AI-accelerated bug discovery and the capacity of open source maintainers to fix reported flaws.
Iranian-affiliated threat actors are actively attacking Internet-facing OT devices across US energy, water, and government sectors, causing operational disruption and financial losses, according to a joint CISA advisory.
Brazilian threat group Water Saci, also known as Augmented Marauder, is running a wormable email campaign deploying the Casbaneiro banking Trojan against Spanish-speaking targets across Latin America and Spain.
Trend Micro research and a fresh FBI warning reveal that Russia's APT28 is targeting governments, defense contractors, and critical infrastructure worldwide using both old and new techniques. Experts say defenders don't need to match the group's sophistication — they just need to get the basics right.
Telehealth company Hims & Hers Health suffered a data breach through its third-party customer support platform, exposing protected health information including details tied to erectile dysfunction, hair loss, and mental health conditions.
At RSAC 2026, AI dominated conversations for the fourth consecutive year, with industry leaders debating agentic systems, SOC replacement, and whether humans can realistically stay in every security decision loop.
Anthropic unveiled Claude Mythos Preview on April 7, an LLM capable of finding and exploiting zero-days across major operating systems and browsers. The company's Project Glasswing initiative aims to keep the powerful model in defensive hands, but experts remain skeptical.
Fraud across Latin America's digital banking sector is accelerating faster than any other global region, fueled by social engineering, account takeovers, and mobile-focused attack chains, according to a new BioCatch report.