Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1296 articles
Political donation scammers impersonate candidates or parties through calls, texts, emails, fake sites, and surveys to steal money or personal information. Verify requests through official channels and avoid sharing information with unverified contacts.
Wiz describes building a natural-language query tool for its cloud security graph using retrieval, curated examples, clustering, and reranking to help users construct queries.
An explainer on macOS Full Disk Access, its role in TCC privacy controls, the risks of excessive permissions, and how users and administrators can review and manage access, including through MDM.
DarkOwl outlines phishing methods beyond email, including voice, SMS, QR-code and deepfake scams. It describes how they can deceive victims and advises checking QR-code destinations before opening them.
Drainers as a Service packages tools for stealing cryptocurrency or traditional financial assets, often through subscriptions or affiliate programs. The article describes their use, sale, and risks to individuals and organizations.
The article explains how adversary-in-the-middle attacks proxy login sessions to capture credentials and tokens, why stolen tokens can bypass MFA, and how phishing-resistant MFA and prompt session revocation can reduce risk.
Darktrace outlines how security teams can evaluate AI cybersecurity tools, emphasizing clear goals, vendor transparency, practical integration, and trust in how AI produces alerts and investigations.
The article explains how an AWS account-vending strategy can extend landing-zone controls by automating account setup, ownership, IaC workflows, alerts, networking, and security requirements as organizations scale.
In a customer trial, Darktrace says its email security tool detected four malicious supplier emails and anomalous activity linked to a Microsoft 365 account takeover, while operating in passive mode.
Huntress identifies RMM abuse, BYOVD and WebDAV abuse as notable 2024 threats, describing attack methods, reported increases and defensive steps including MFA, driver blocking and disabling unused WebDAV.
A survey cited in the article found 93% of responses linked security awareness training adoption to a trigger event. It outlines common triggers and advises building programs around lasting security outcomes, not just compliance.
Huntress shares practical cybersecurity advice, including ransomware precautions, VPN protections, Mac security, and basic habits such as using unique passwords, enabling MFA, and recognizing scams.
The article explains how generative AI can help attackers create more convincing BEC campaigns and argues for behavior-based email defenses that identify unusual activity rather than relying only on known attack patterns.
The article explains how AI can augment understaffed security teams through threat detection, alert triage, investigation, and automation, while emphasizing staff training and human oversight.
Huntress describes dark-web businesses selling cybercrime services, a ransomware group’s customer-support system, and a purported cybercriminal university, highlighting how organized and accessible criminal activity can be.
An overview of leaks, breaches, insider disclosures, ransomware data, scrapes, combo lists and stealer logs, covering how they circulate, challenges in assessing them, and steps individuals and organizations can take to reduce risk.
A webinar recap highlights mid-sized businesses’ cybersecurity challenges: limited time and skills, difficulty engaging employees in security awareness, and uncertainty about cybersecurity budgeting.
Biometrics can reduce password-related risks, but compromised fingerprints or facial data cannot be reset. The article discusses past biometric-data exposures and concerns about surveillance, human rights, and expanding data use.
The article outlines patient-data privacy risks from GPT use in healthcare and recommends private, controlled systems, anonymization, audits, staff training and clear data-handling protocols.
An explainer describes brute-force methods, examples of their use, and password risks, then recommends protections including unique, strong passwords, MFA, login limits, account lockouts, and monitoring.
Hybrid-cloud attacks can move quickly through APIs and centralized identities, while fragmented data complicates investigations. The article explains how shared threat intelligence can help defenders respond and investigate more effectively.
A Huntress episode recap shows how AI can help create convincing phishing, smishing, and vishing attacks, including voice-cloning demonstrations, and recommends MFA-protected authorization for sensitive actions.
The article compares state breach totals through 2022 with per-capita cybercrime victim rates from the FBI’s 2023 report, highlighting Alaska and California and discussing SMB exposure and a 2023 hospital ransomware incident.
An overview of LLM security risks describes prompt injection, jailbroken models, training-data poisoning, sensitive-data leakage and AI agents that can act on host systems.
