Enrique Lores had an ambitious turnaround plan for the payments company. Now, one of its rivals has lobbed a buyout offer.
Global Security News
Scans for Hikvision Intelligent Security API, (Sun, Jul 19th)
We have been following issues with Hikvision cameras for a long, long time. Like many similar products, Hikvision cameras have a long history of vulnerabilities and are often targeted by internet-wide scans that our honeypot network detects. This weekend, I noticed a new type of recon scans against the newer OPEN Intelligent Security API (ISAPI) provided by…
Global Security News
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter CrashStealer: C++ macOS infostealer posing as crash reporter Lucide Proxy: Turning Student Web Proxies into DDoS Bots AsyncAPI npm organization compromised, 2M weekly downloads affected OkoBot: new sophisticated malware framework targets cryptocurrency users …
Global Security News
Security Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. OpenSSL Fixes HollowByte Memory Exhaustion Bug Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network…
Global Security News
Hackers abuse ViPNet software to target Russian govt agencies
An advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian organizations, including government agencies. […]
Global Security News
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware
Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware. According to the Computer Emergency Response Team of Ukraine (CERT-UA), the activity has been attributed to UAC-0145, a sub-cluster within Sandworm, an advanced hacking unit affiliated with GRU, Russia’s
Global Security News
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior their public disclosure since June 22, 2026. Cybersecurity company Volexity is tracking the activity under the moniker UTA0533. The discovery was made following an incident response investigation earlier this
Global Security News
Big Blue Blues
Plus, what happens when you give an AI agent access to your passwords, tech executives fear for their lives amid AI backlash, how not to charge your phone, and more.
Global Security News
How a virtual LAN can better protect your home network – and the best way to get started
You might think a basic LAN setup is secure enough, but there could be issues lurking that require device isolation to ensure your security.
Global Security News
Pastors Using AI to Help Write Sermons Grapple With Where to Draw the Line
A divide is growing over AI-assisted preaching in American churches. “Martin Luther is rolling over in his grave.”
Global Security News
From Principles to Practice: Actionable Blueprints for Ethical AI
Part 2 of this series on ethical AI looks at operationalizing trust with the clear prompting framework and robust data governance for your public- or private-sector organization.
Global Security News
The 5 laptop features worth paying extra for, plus 3 you can ignore
From RAM and hardware, here’s where you should spend your laptop budget — and where you can save money.
Global Security News
Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Two new high severity WordPress vulnerabilities, patch immediately! The 7.0.2 WordPress security release addresses one critical and one high severity security issue. Cynative: Open-source deep research agent Running a large language model against a live cloud account to hunt for…
Global Security News
Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits
Public exploits are now available for two critical WordPress flaws that attackers can chain to gain remote code execution without authentication. Public proof-of-concept exploits are now available for the critical wp2shell vulnerabilities affecting WordPress Core. The flaws, tracked as CVE-2026-63030 and CVE-2026-60137, can be chained to achieve pre-authentication remote code execution on default WordPress installations…
Global Security News
I’ve been a Google phone diehard for 10 years – here’s my 5-part wishlist for Pixel 11
I’m loyal to Google phones, but some changes need to be made.
Global Security News
Update now: 7-Zip fixes RCE flaw exploitable with malicious archives
7-Zip version 26.02 was released to fix a remote code execution vulnerability that could allow attackers to execute malicious code by convincing users to open specially crafted compressed files. […]
Global Security News
OpenSSL Fixes HollowByte Memory Exhaustion Bug
Okta disclosed HollowByte, an 11-byte OpenSSL flaw that lets remote attackers exhaust server memory and trigger denial-of-service attacks. Okta’s Red Team disclosed a denial-of-service vulnerability in OpenSSL they named HollowByte, and the attack payload is exactly 11 bytes. A remote, unauthenticated attacker sends that payload and the server allocates up to 131 KB of memory…
Global Security News
WordPress Core “wp2shell” RCE flaws get public exploits, patch now
Public exploits have been released for the critical “wp2shell” remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately. […]
Global Security News
Lego Strikes Back Against Screens—With Chips in Bricks
The new Smart Play sets come with motion sensors, lights and sound. But does the legendary building system actually need this digital upgrade?
Global Security News
Two new high severity WordPress vulnerabilities, patch immediately!
The 7.0.2 WordPress security release addresses one critical and one high severity security issue. The vulnerabilities reported to the WordPress security team include: CVE-2026-60137 – A facilitated SQL injection issue reported as a team by TF1T, dtro, and haongo CVE-2026-60137 – A REST API batch-route confusion and SQL injection issue leading to Remote Code Execution…
Global Security News
Microsoft warns of surge in ACR Stealer attacks on customers
Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication tokens, and sensitive documents from its enterprise customers. […]
Global Security News
Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network
Researchers found China’s Daxin rootkit and a new Stupig backdoor on a Taiwan firm’s network, suggesting a stealthy intrusion dating back to 2013. Symantec’s Threat Hunter Team found Daxin running on a compromised host at a Taiwan-based subsidiary of a multinational high-tech manufacturer in 2026. Daxin is a Windows kernel-mode rootkit that Symantec first documented…
Global Security News
The Future of Age Verification: Your Face Never Leaves Your Device
As age verification laws expand worldwide, organizations face growing pressure to protect users’ privacy while meeting regulatory requirements. Incode explains how on-device age estimation verifies age without transmitting or storing facial images, reducing biometric privacy risks while supporting compliance. […]
Global Security News
What to Know About the Chinese AI Models Rattling U.S. Stocks
The rise of products such as Moonshot’s Kimi K3 raises concern about the tech boom’s staying power.
Global Security News
U.S. CISA adds Fortinet FortiSandbox and Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiSandbox and Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Fortinet FortiSandbox and Microsoft SharePoint flaws to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-25089 (CVSS score of 9.8) Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-39808 (CVSS score of…
Global Security News
The iPad mini’s biggest update in 5 years is expected this fall – here’s what we know
The next iPad mini is rumored to feature an OLED panel and a more powerful processor. A new base iPad is also in the works.
Global Security News
I tested Nothing’s new pink earbuds, and they look as good as they sound
Global Security News
IBM CEO Arvind Krishna Has Nowhere to Hide From AI
Global Security News
Why Microsoft 365 Security Alerts Are Essential for Modern Businesses
Learn why Microsoft 365 security alerts are critical for detecting cyber threats, improving incident response, maintaining compliance, and protecting your organization’s cloud environment. Cybersecurity threats have become more sophisticated than ever before. From phishing campaigns and ransomware attacks to account takeovers and insider threats, organizations face a constant stream of security challenges. Businesses that rely…
Global Security News
Cirrus Introduces the TRAC10: A Purpose-Built Aircraft Engineered to Transform Professional Flight Training
The TRAC10 is a modern, efficient, and cost-effective flight training platform for professional flight schools
Global Security News
Insider Risk Management Fundamentals: 10 Best Security Practices for Implementation
This post will discuss the fundamentals of insider risk management. Also, I will show you 10 security best practices for implementation. The frequency of security incidents caused by insiders is on the rise. The recent 2022 Cost of Insider Threats Global Report by the Ponemon Institute reveals that 67% of companies experienced between 21 and…
Global Security News
AI Chip Startup Etched Is in Talks for $20 Billion Valuation
The startup is also raising capital at a $10 billion valuation in a separate round led by Sequoia.
Global Security News
Google’s Gemini lets strangers send messages from your locked Android phone
Gemini, Google’s AI assistant, is supposed to make life easier for Android smartphone owners. But right now it may also be making life easier for anyone anyone who happens to pick up your phone. Read more in my article on the Hot for Security blog.
Global Security News
ACR Stealer exploits user interaction to steal sensitive data
Global Security News
2 charged in New York for laundering $43 million from investment scams
Zhuoying Chen, 27, and Haojie Zhang, 38, are accused of managing a network that transferred at least $43 million to China, based on information published by Bleeping Computer.
Global Security News
New Russian-speaking threat actor UAT-11795 targets US and Europe with novel malware
UAT-11795 utilizes novel tools, including the Python-based Starland RAT and the PowerShell-based WLDR agent, which operates entirely in-memory with encrypted beaconing and a Runspace execution engine.
Global Security News
Lawyers say Russian tourist detained in Armenia over mistaken identity in ransomware case
The detained Russian, Aleksandr Yuryevich Ermakov, was apprehended in Armenia on June 28, based on a U.S. request.
Global Security News
WatchGuard report highlights employee behavior risks for SMBs
The 2026 Cybersecurity Hygiene Report indicates that 64% of employees use unauthorized AI tools, expanding “shadow AI” and creating visibility gaps.
Global Security News
SoftBank leverages OpenAI for AI-driven cybersecurity patching service
SoftBank’s “Patching as a Service” (PaaS), powered by a joint venture with OpenAI called SB OAI Japan, offers clients AI-infused remediation planning and vulnerability assessment.
Global Security News
Windows 10 devices carry 3 times the risk of Windows 11, data shows
New data from Lansweeper indicates that approximately 16.9% of Windows client devices, or one in six, continue to operate on Windows 10.
Global Security News
MacOS malware hijacks Telegram sessions, targets crypto wallets
The macOS malware targets information stored locally on infected devices, including passwords, browser cookies, Apple Notes and Telegram Desktop session files.
Global Security News
Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets
Ernst & Young (EY) disclosed a data breach after attackers compromised a third-party IT support system containing client documents and tax information. Ernst & Young (EY) is disclosed a data breach linked to a compromised third-party support ticket system used by its IT teams. The platform stored support requests that may have included documents containing…
Global Security News
Over 1 million malicious emails found using text salting to fool AI scanners
Global Security News
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and 7.0 site was in range until Friday, when WordPress shipped 6.9.5 and 7.0.2 and enabled what it calls forced updates through its auto-update system. Adam Kues at…
Global Security News
Microsoft pauses Windows 11 update for Dell PCs due to compatibility issues
The update, released on July 14, was halted after reports indicated that a number of Dell devices displayed a yellow exclamation point next to the Intel Innovation Platform Framework Processor Participant driver in Device Manager.
Global Security News
Ernst & Young data breach exposes client tax information
The breach was detected on April 23 when Ernst & Young noticed anomalous activity on its networks.
Global Security News
Abbott reports cyberattack on cancer diagnostics business
The medical device company stated that the breach did not affect other Abbott businesses, sites, or systems.
Global Security News
Million Email Phishing Campaign Uses Text Salting
Attackers are repurposing an old spam evasion technique to bypass a new generation of AI-powered email security tools. Barracuda researchers say they have identified more than one million retail-themed phishing emails since April that use text salting — a method that hides large amounts of benign content inside messages to manipulate how automated security systems…
Global Security News
M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More – SWN #599
Global Security News
Filtering Known-Bad Messages Does Not Prove Detection Readiness
Global Security News
Abbott Laboratories probes two cyber incidents amid extortion claims
Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal legacy Exact Sciences systems in its Cancer Diagnostics business, while also investigating a separate claim that attackers breached its LabCentral portal and stole company data. […]
Global Security News
Cut to the chase: How to save time and effort through validation in exposure management
As AI pumps up the volume of newly discovered vulnerabilities, continuous control validation lets security teams cut through the noise.
Global Security News
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that never arrives. On the glibc systems Okta tested, that memory is gone until the process restarts. OpenSSL shipped the HollowByte fix in June with no CVE, no advisory, and no changelog entry pointing at it.…
Global Security News
Inc Ransomware Exploits SonicWall SMA Zero-Days
When chained together, the two vulnerabilities allow threat actors to gain root-level capabilities on SonicWall’s mobile access appliances.
Global Security News
Stolen identities cause 79% of ransomware attacks, says Sophos report
Global Security News
SpaceX in Talks to Provide Computing Power for Pentagon’s AI Push
The company would provide billions of dollars’ worth of data-center capacity under the arrangement, people familiar with the matter said.
Global Security News
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil, which was observed using an “unprecedented” four-tier blockchain-based command-and-control (C2) infrastructure spanning Tron,
Global Security News
How to Evaluate Threat Intelligence and Threat Management Platforms
Global Security News
Threat Intelligence Does Not Equal Threat Readiness
Global Security News
What Threat Intelligence Program Failure Costs the Business
Global Security News
IBM Q2 Revenue Warning Sends Stock Down 25%
IBM surprised investors Tuesday with an early warning that its second-quarter results will come in below expectations, sending the company’s stock plummeting roughly 25% and dragging other software and consulting names lower. For partners, this offers yet another data point about how enterprise customers make purchasing decisions in today’s market. Customers redirect spending toward scarce…
Global Security News
HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload
A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of just 11 bytes. […]
Global Security News
A cyberattack hit Nichirei, one of Japan’s largest food companies
A cyberattack hit one of Japan’s largest food companies, Nichirei, disrupting logistics and shipments. The company is gradually restoring operations. Nichirei is one of Japan’s largest food companies, best known for its frozen food business. Founded in 1942 and headquartered in Tokyo, it operates globally through dozens of subsidiaries. The food giant confirmed that the…
Global Security News
Attackers are Exploiting Trust in 2026, not Just Technology
When UltraViolet Cyber evaluated major trends across security threats in Q2, the landscape covered a lot of ground. Highly active threat actors, exploited vulnerabilities, ransomware operations, AI-driven social engineering, identity-based intrusions, and a fast-growing family of “Fix-type” attacks all shaped the quarter. But there was one pattern that kept showing up across categories that don’t…
Global Security News
OnlyFans performers become unlikely allies of CISOs in securing websites
CISOs at government organizations and universities have an unexpected ally coming to their aid: OnlyFans models. For some time, hackers have exploited weaknesses in the websites of universities or government departments to host scams or malware, using content stolen from the OnlyFans website as bait to attract victims. Now, according to security researchers at Upguard,…
Global Security News
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator’s own dashboard claims 3,811 unique AWS keys. A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, Open WebUI, Langflow, and Gradio: the image generators, local model runners, and workflow builders that teams stand up fast…
Global Security News
OpenAI’s new hardware is a $230, 13-switch keyboard for Codex
OpenAI is selling its first hardware — without any help from Jony Ive. It describes the Codex Micro as a “command center for agentic work” but it’s really a 13-switch wireless keyboard customized to help developers keep tabs on what their Codex agents are doing. It costs $230. The keyboard has 13 mechanical switches (one…
Global Security News
What Threat Management Actually Controls
Global Security News
What AI Fraud and Deepfake Failure Costs the Business
Preventing these attacks requires collaboration across security, finance, HR, legal, and business leaders—not just the CISO
Global Security News
Pax8 Explains Microsoft Pricing and Partner Benefit Changes
Cloud marketplace distributor Pax8 is advising Microsoft partners to prepare for a series of changes affecting Microsoft 365 pricing, cloud benefit redemption, and partner enablement as the company rolls out updates that could influence customer renewals and operational workflows. The guidance highlights Microsoft’s July 1 pricing changes, a new process for redeeming partner cloud benefits…
Global Security News
The Real AI Threat Is Blind Trust
AI models left to both interpret and execute commands eliminate critical cybersecurity oversight.
Global Security News
This air purifier is helping keep my home’s air free of wildfire smoke – and it’s on sale
Get cleaner air for less with the Blueair Blue Pure 211i Max air purifier for 20% off on Amazon right now.
Global Security News
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared technical details of the event, described the threat actor as a sub-group of GoldenEyeDog (aka APT-Q-27, Dragon Breath, and Miuuti Group), a Chinese cybercrime group known for its targeting of the gambling and gaming sectors…
Global Security News
Dell XPS 16 review: A sleek, high-end laptop perfect for creatives and professionals
Dell’s XPS 16 screams ‘Premium laptop’ thanks to its sleek design, OLED screen, and powerful hardware.
Global Security News
Beyond 24/7 Monitoring: What CISOs Should Ask Before Choosing an MSSP
Evaluation should start with the operating problem your organization needs solved
Global Security News
July’s Patch Tuesday sees an end-of-support collision amidst a massive, record-setting patch wave
Microsoft addressed 722 CVEs this month once the 427 Chromium upstream relays are set aside — roughly three times a normal cycle and one of the largest single months in recent memory. Two vulnerabilities arrive under active exploitation: an elevation of privilege in Active Directory Federation Services (CVE-2026-56155), and an elevation of privilege in SharePoint…
Global Security News
3 ways to close cybersecurity’s remediation gap
Global Security News
State officials, election experts pan Trump speech: ‘This is what desperation looks like’
State and local officials and election security experts largely panned a Thursday night primetime speech by President Donald Trump, saying it was reflective of White House “desperation” to find any credible evidence to support their claims that U.S. elections have been rigged against the two-term president. While the White House teased explosive new claims about…
Global Security News
CTOs say human alignment is key to cyber resilience
Global Security News
The Therapeutic Potential of a Powerful Toad Poison
Plus, the future of watching sports, how AI might actually help solve the next labor crisis and the woman mapping her biological data.
Global Security News
Government Agencies Falling Victim to Ransomware Daily, Warns Study
Government organizations are targeted by attackers who know agencies cannot afford disruption to public services
Global Security News
Ernst & Young discloses data breach after support system hack
Ernst & Young is notifying customers of a data breach caused by the compromise of a third-party support ticket system used by its IT personnel. […]
Global Security News
WatchGuard Report Finds Shadow AI Raising SMB Cyber Risk
WatchGuard Technologies, a unified cybersecurity organization for managed service providers (MSPs), recently unveiled new research which found that employee behavior has led to significant and sometimes unseen cybersecurity risks for small- and medium-sized businesses (SMBs). Unauthorized AI use creates visibility gaps The 2026 Cybersecurity Hygiene Report found that 64 percent of employees surveyed admit to…
Global Security News
Google must open Android to rival AI agents, EU orders
The European Union is stepping up its actions against US tech giants under the Digital Markets Act, which is intended to ensure fair competition between digital platforms. On Thursday, the European Commission issued two rulings to limit Google’s dominance. The Commission ordered Google to open up the Android operating system to AI assistants other than…
Global Security News
Google must open Android to rival AI agents, EU orders
The European Union is stepping up its actions against US tech giants under the Digital Markets Act, which is intended to ensure fair competition between digital platforms. On Thursday, the European Commission issued two rulings to limit Google’s dominance. The Commission ordered Google to open up the Android operating system to AI assistants other than…
Global Security News
23andMe Faces New Security Mandates in $18m Data Breach Settlement
23andMe has agreed to an $18m settlement with 42 US attorneys general over its 2023 data breach, including enhanced data protection requirements
Global Security News
I tested this backup power station during a real blackout – don’t make my mistakes
A real three-day blackout revealed problems I never would’ve found on a power station’s spec sheet.
Global Security News
Cloud Marketplace Trends Every Channel Partner Should Know
Cloud marketplaces are becoming one of the most important routes to market for enterprise technology. Omdia projects that hyperscaler marketplace sales will increase from $30 billion in 2024 to $163 billion by 2030 as more organizations use committed cloud spending, private offers, and consolidated billing to purchase software and services. For channel partners, however, AWS…
Global Security News
Leading members of Scattered Spider sentenced in UK to 66 months in jail
A pair of young men were sentenced to 66 months in jail for committing a cyberattack on the Transport for London that brought the network’s operations to a standstill in 2024, the United Kingdom’s National Crime Agency said Thursday. Thalha Jubair and Owen Flowers were arrested at their homes in September 2025, barely a year…
Global Security News
AI OK in Linux development, says Torvalds
Linus Torvalds has a complicated relationship with AI, seeing both its good and bad points. But his latest remarks on the usefulness of AI may have raised a few eyebrows in open-source circles. Just a few weeks after the Linux founder complained that a “continued flood” of AI-generated vulnerability reports had made the Linux kernel…
Global Security News
I wore 3 blood pressure watches for a month to find the most accurate – and this one wins
I tested Samsung, Amazfit, and Doctor Fit blood pressure watches – and only one rivaled my Garmin Index BP Monitor.
Global Security News
Zero-Days, AI Governance Gaps, and Global Cybercrime Define This Week’s Security Landscape in July 2026
Major Threats & Vulnerabilities Record Patch Releases and Actively Exploited Zero-Days Microsoft’s July 2026 Patch Tuesday addressed a record 570 vulnerabilities, including three zero-days and two under active exploitation. Of these, 59 were rated critical, many enabling remote code execution. Organizations are urged to prioritize patching actively exploited vulnerabilities, apply compensating controls, and validate patch…
Global Security News
5 underrated iOS 27 features that make my iPhone way better – and none are Siri AI
Some of my favorite new features in iOS 27 are flying under the radar, but no less impactful.
Global Security News
Inside the Search for “Clean” Residential Proxies for Carding
Residential proxies are no longer the silver bullet they once were for carding. Flare explains why cybercriminals increasingly seek “clean” residential proxies and combine them with browser fingerprints, device profiles, and other identity signals to evade modern fraud detection. […]
Global Security News
Apple Overthrows Nvidia to Reclaim Wall Street’s Crown
The iPhone maker became the U.S.’s most valuable publicly traded company as investors are shifting focus from hardware supply to consumer execution.
Global Security News
“TTF Trap” Phishing Emails Use Fake Font Files to Deliver Windows Malware
An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows…
Global Security News
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
North Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious payloads as part of a campaign using fake job postings and coding challenges. “Any user who ran the project ended up with a four-stage payload aligned with OTTERCOOKIE: a browser credential and crypto…
Global Security News
Apple widens OpenAI trade secrets fight with preservation orders
Dozens of former Apple employees now working at OpenAI have been put on notice after Apple reportedly sent legal letters ordering them to preserve documents and communications relevant to its trade secrets lawsuit against OpenAI. The Financial Times reports that “around 40” employees have been targeted with these letters, which repeat Apple’s claim that its confidential information…
Global Security News
China, Russia, and 27 others create World AI body, without US
China has created an international organization to set standards and introduce regulation for AI, inviting 28 other countries to join — but the US, a leading AI powerhouse is not part it. The World Artificial Intelligence Cooperation Organization (WAICO) was established by 29 countries, including China, Russia and Brazil, at a ceremony in Shanghai, China,…
Global Security News
‘The SaaS apocalypse is overrated’: How Workday and other software provders plan to survive AI
Experts warn that an extinction event is coming for SaaS, thanks to AI disintermediation. Here’s why some vendors remain skeptical.