This blog is intended to share an in-depth analysis of a recent multi-stage attack attributed to the Water Gamayun advanced persistent threat group (APT). Drawing on telemetry, forensic reconstruction, and known threat intelligence, the Zscaler Threat Hunting team reconstructed how a seemingly innoc...
The firm achieved “Category Leader” status in all five evaluated categories, recognized for its innovative approach to mapping threat actor infrastructure. Fremont, CA – November 25, 2025 – Constella Intelligence, a leader in digital risk protection and identity threat intelligence, today announced...
Introducing Oxygen Review Center v.2.0 — a faster, browser-based, real-time collaboration platform that streamlines digital evidence review for teams of any size.
CISA has described the techniques used by attackers and pointed out that the focus is on high-value individuals.
The post CISA Warns of Spyware Targeting Messaging App Users appeared first on SecurityWeek.
Amazon Web Services (AWS) is introducing guidelines for network scanning of customer workloads. By following these guidelines, conforming scanners will collect more accurate data, minimize abuse reports, and help improve the security of the internet for everyone. Network scanning is a practice in mo...
Focusing on improving the resilience of AI agents, the startup will use the funding to accelerate deployments of its platform.
The post AI Agent Security Firm Vijil Raises $17 Million appeared first on SecurityWeek.
Hashtag-do-whatever-I-tell-you Cato Networks says it has discovered a new attack, dubbed "HashJack," that hides malicious prompts after the "#" in legitimate URLs, tricking AI browser assistants into executing them while dodging traditional network and server-side defenses.…
The Georgia Superior Court Clerks' Cooperative Authority (GSCCCA) said it is experiencing a “credible and ongoing cybersecurity threat” that forced the organization to temporarily restrict access to its website and services.
L'Inspection nationale des données de Lettonie (DVI) a publié des lignes directrices sur les conditions de légalité de l'enregistrement audio couplé à la vidéosurveillance.L'autorité souligne que l'enregistrement audio présente des risques pour la vie privée nettement plus élevés que la seule captur...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre d'AENA, S.M.E., S.A., comprenant le prononcé d'une amende de 10 043 002 €, pour des manquements liés à la mise en œuvre de son système de reconnaissance faciale dans les aéroports espagnols.Cette affai...
The FBI warns of a surge in account takeover (ATO) fraud schemes and says that cybercriminals impersonating various financial institutions have stolen over $262 million in ATO attacks since the start of the year. [...]
L'autorité espagnole de protection des données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de XFERA MÓVILES, S.A.U. (comprenant le prononcé d'une amende de 4 000 000 €) pour des manquements en lien avec la sécurité des données personnelles suite à une violation de données de gr...
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de ATRESMEDIA CORPORACIÓN DE MEDIOS DE COMUNICACIÓN, S.A. (comprenant le prononcé d'une amende de 6 000 €) pour des manquements en lien avec le principe de minimisation des données.Cette af...
Several security issues were fixed in the Linux kernel.
L'Autorité de protection des données personnelles (UODO) polonaise a publié une décision prononçant un avertissement à l'encontre d'un député pour la divulgation de données personnelles sans base légale lors d'une intervention parlementaire.L'affaire trouve son origine dans une intervention parlemen...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision constatant une infraction à l'encontre de la Mairie de San Cristóbal de La Laguna pour des manquements en lien avec le non-respect d'une injonction de l'autorité de contrôle.Cette affaire débute par un écrit d'un plaignant enr...
Tor has announced improved encryption and security for the circuit traffic by replacing the old tor1 relay encryption algorithm with a new design called Counter Galois Onion (CGO). [...]
This blog shares our journey and insights from building autonomous AI agents for MDR operations and explores how the shift to a GenAI-powered SOC redefines collaboration between humans and AI.
The post Charting the future of SOC: Human and AI collaboration for better security appeared first on Micro...
State-backed crews are already poking at autonomous tools, Trend Micro warns Cybercriminals, including ransomware crews, will lean more heavily on agentic AI next year as attackers automate more of their operations, Trend Micro's researchers believe.…
New research has found that organizations in various sensitive sectors, including governments, telecoms, and critical infrastructure, are pasting passwords and credentials into online tools like JSONformatter and CodeBeautify that are used to format and validate code.
Cybersecurity company watchTowr...