This is a current list of where and when I am scheduled to speak:
I’m speaking at Ontario Tech University in Oshawa, Ontario, Canada, at 2 PM ET on Thursday, February 26, 2026.
I’m speaking at the Personal AI Summit in Los Angeles, California, USA, on Thursday, March 5, 2026.
I’m speaking at Tech L...
Threat intelligence observations show that a single threat actor is responsible for most of the active exploitation of two critical vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE-2026-21962 and CVE-2026-24061. [...]
Session 12C: Membership Inference
Authors, Creators & Presenters: Yan Pang (University of Virginia), Tianhao Wang (University of Virginia)
PAPER
Black-box Membership Inference Attacks against Fine-tuned Diffusion Models
With the rapid advancement of diffusion-based image-generative models, the...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in BeyondTrust RS and PRA to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an BeyondTrust RS and PRA vulnerability, tracked as CVE-2026-1731 (CVSS score...
Threat actors are sending physical letters pretending to be from Trezor and Ledger, makers of cryptocurrency hardware wallets, to trick users into submitting recovery phrases in crypto theft attacks. [...]
Part 3 of a 4-Part Series: The SEG Breakup Guide for MSPs
The post The Relationship Tax: What Staying With Your SEG Is Really Costing Your MSP appeared first on Security Boulevard.
With more than 37 million combined downloads, the extensions expose users to tracking and personal information theft.
The post Over 300 Malicious Chrome Extensions Caught Leaking or Stealing User Data appeared first on SecurityWeek.
Plus: Meta plans to add face recognition to its smart glasses, Jared Kushner named as part of whistleblower’s mysterious national security complaint, and more.
A new alleged Russia-linked APT group targeted Ukrainian defense, government, and energy groups, with CANFAIL malware. Google Threat Intelligence Group identified a previously undocumented threat actor behind attacks on Ukrainian organizations using CANFAIL malware. The group is possibly linked to R...
The Mexican city of Guadalupe, which will host portions of the 2026 World Cup, recently showed off four new robot dogs that will help provide security during matches at BBVA Stadium.
※この記事は自動翻訳されています。正確な内容につきましては原文をご参照ください。 MegaETH 上で開発を行うビルダーの皆さまは、スマートコントラクトやトークン、プロトコル全体を対象にリアルタイムで脅威を検知する Chainalysis の Web3 セキュリティソリューション Hexagate を、今すぐご利用いただけます。 Hexagate...
Cyber threats are growing at an unprecedented pace. In 2024 alone, global cyber threat losses reached an estimated US$9.5 trillion, and this figure is projected to rise even further in 2025. If threats were a country, it would rank as the world’s third-largest economy, behind only the United States...
A backend flaw in web admin dashboards used by one of India's largest pharmacy chains, exposed thousands of online pharmacy orders.
MSSPs optimize for SLA metrics, not security outcomes. Autonomous SOC platforms like Morpheus can replace them at 10x lower cost.
The post From MSSP to Autonomous SOC: Replacing Linear Headcount with Infinite Compute appeared first on D3 Security.
The post From MSSP to Autonomous SOC: Replacing Line...
UFP Technologies, un fabricant de dispositifs médicaux, a subi une attaque de ransomware qui a entraîné le vol de fichiers et la perturbation de certains systèmes informatiques. L'incident a été détecté le 14 février et a eu un impact sur les systèmes de facturation et de création d'étiquettes de li...
Researchers warn that a critical vulnerability patched this week in BeyondTrust Remote Support is being exploited in the wild to compromise self-hosted deployments, including Bomgar remote support appliances, which included affected versions of the impacted software.
Bomgar...
We discuss the extensive use of malicious QR codes using URL shorteners, in-app deep links and direct APK downloads to bypass mobile security.
The post Phishing on the Edge of the Web and Mobile Using QR Codes appeared first on Unit 42.
A new variation of the fake recruiter campaign from North Korean threat actors is targeting JavaScript and Python developers with cryptocurrency-related tasks. [...]
A new threat actor, UAT-9921, uses the modular VoidLink framework to target technology and financial organizations, Cisco Talos reports. Cisco Talos spotted a previously unknown threat actor, tracked as UAT-9921, using a new modular attack framework called VoidLink. The group targets organizations i...
An exploration of the interesting question.