Security teams can efficiently incorporate AI applications into their workflow by following 12 practices, including visibility, risk understanding, and trust building.
A coordinated investigation by Access Now, Lookout, and SMEX has exposed an ongoing spyware campaign linked to the Bitter APT group targeting journalists and civil society members across the Middle East and North Africa since at least 2022.
Orange Business is rolling out branded calling, deepfake detection, and AI-augmented telephony to address rising impersonation fraud and eroding trust in enterprise voice channels across more than 7,000 enterprise customers worldwide.
Bitcoin ATM operator Bitcoin Depot confirmed that attackers stole approximately 50.903 Bitcoin worth $3.665 million from its corporate wallets after breaching its IT systems on March 23, 2026.
A sophisticated zero-day vulnerability in Adobe Reader has been actively exploited since at least December, using maliciously crafted PDF files to steal data and potentially enable full system compromise.
European rail pass operator Eurail B.V. has confirmed that a cyberattack on December 26, 2025 exposed the personal data of 308,777 individuals, including names, passport numbers, and sensitive health and financial information.
Industrialized fraud rings are deploying AI to build synthetic identities at unprecedented scale, rendering traditional detection methods obsolete. Experts argue the only viable response is to stop reacting and start hunting.
BleepingComputer is hosting a live webinar on April 30, 2026 at 2:00 PM ET exploring how security teams can detect early threat actor signals across dark web forums, Telegram channels, and access broker marketplaces.
Researchers from RSAC combined two adversarial techniques to circumvent Apple Intelligence's input and output filters, achieving a 76% success rate across 100 test prompts. Apple has since rolled out fixes in iOS 26.4 and macOS 26.4.
The February 2026 Figure breach exposed nearly 967,200 email records without a single exploit — and the downstream attack chain it enables exposes a fundamental flaw in how most organizations think about MFA.