Business ❯ Information Technology

Risk Management

Data Security Cyber Threats Incident Response Data Protection Supply Chain Security Compliance Security Audits Cybersecurity Measures Security Protocols Employee Policies

Counterfeit Claude Code Installer Targets Developers With Browser Credential Theft

Researchers say the lure abuses Chrome’s built-in elevation interface to bypass App-Bound Encryption.

Microsoft Details AiTM Phishing Wave That Hit 35,000 Users in Mid-April

Huntress Sinkholes $10 Update Domain Behind Signed Adware That Disabled Antivirus on About 25,000 PCs

CPUID Hack Redirected CPU-Z, HWMonitor and PerfMonitor Downloads to STX RAT

Trivy Supply-Chain Attack Poisons GitHub Action Tags to Steal CI/CD Secrets

Salesforce Alerts Customers to Experience Cloud Scans After ShinyHunters Claims Data Thefts

Public Google API Keys Found to Unlock Gemini as Google Rolls Out Blocks

Microsoft 365 Copilot Bug Let AI Summarize Protected Emails as Microsoft Monitors Patch

CISA Orders Federal Agencies to Replace Unsupported Edge Devices

1Password Rolls Out Browser Pop-Up to Thwart Phishing on Mismatched Sites

Fortinet Confirms FortiCloud SSO Bypass Hitting Fully Patched FortiGate Firewalls

Malicious npm 'Lotusbail' Package Steals WhatsApp Data and Plants Persistent Backdoor

ReliaQuest Uncovers Wave of Typosquatted "Zendesk" Sites Targeting Support Teams

RediShell: Critical Redis RCE Triggers Urgent Updates With 60,000 Servers Unauthenticated

Researchers Say GoAnywhere CVSS 10 Flaw Was Exploited as Zero-Day Before Disclosure

Fortra Patches Critical GoAnywhere MFT Flaw as Researchers Urge Blocking Public Admin Access

Decade-Old Pixie Dust Flaw Still Exposes WPS on Consumer Routers, NetRise Finds

Google Deploys Protections for Gmail AI Summaries to Thwart Phishing Exploit

FBI and CISA Warn of Escalating Ghost Ransomware Threat Exploiting Unpatched Systems

UN Aviation Agency Confirms Data Breach of 42,000 Recruitment Records