New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers

Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA

Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found

New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments

Progress Software, the provider of the popular file-sharing and data storage solutions, has urged customers to shut down the server hosting their Storage Zone Controller

Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting vulnerable routers using weak SNMP credentials

An Armenian man has pleaded guilty to his role in the infamous Ryuk ransomware operation

Australian Cyber Security Centre warns CMS users of mass scanning and exploitation campaign

Explore how to fund the new AI SOC budget line through tool consolidation, NIST CSF mapping, and a board-ready loss-exposure story.

AI SOC pricing rarely matches the quote. Discover the hidden costs, real TCO, and pricing models security leaders must model first.

UAT-11795 is weaponizing legitimate software such as WebEx and Zoom to dupe victims

Select devices running Intel Innovation Platform Framework drivers encountered “poor performance”

23andMe will pay $18 million to settle claims from 43 states over its 2023 data breach, which exposed genetic information tied to nearly 7 million people.

Microsoft is reportedly developing Project Perception, a lower-cost AI security tool that would use multiple models to identify enterprise vulnerabilities.

Zoom patched a critical Windows flaw that could enable remote account takeover, along with three high-severity privilege-escalation vulnerabilities.

The FCC has proposed requiring identity verification for phone activation, a move supporters say will fight fraud while critics warn it threatens privacy.

Apple faces a proposed class action alleging a Hide My Email flaw could expose users’ real addresses despite the company’s privacy claims.

Catch up on the week's biggest tech news, including Google's app store shakeup, Apple's AI expansion, OpenAI's hardware plans, and critical security threats.

1Password's new Claude integration lets AI agents sign in to websites without exposing passwords, adding user approval and credential protection.

Hugging Face says an autonomous AI agent carried out a cyberattack against its production systems, highlighting the growing role of AI in offensive and defensive cybersecurity.