This year’s event calendar has been packed with high-profile gatherings that drew global audiences, intense scrutiny, and enormous security demands. From the World Cup to the United States’ 250th celebration, major events have become prime targets for a range of threats, from physical attacks on attendees to cyber breaches targeting sensitive information. The truth is … Read more
Attackers are combining multiple evasion tactics to deliver Business Email Compromise (BEC) phishing attacks with a high degree of success. This campaign, dubbed “The TFF Trap,” has been observed by researchers at Fortinet since late March and involves the use of disguised font files, Lua interpreters, and in-memory execution to bypass endpoint defenses. At its … Read more
As cybersecurity teams struggle to keep pace with the ever-evolving landscape of threats, one software vendor is exploring an innovative approach to vulnerability remediation: leveraging large-language models (LLMs) to identify and fix flaws in their products. Ivanti’s chief security officer, Daniel Spicer, recently shared insights into the company’s project, which has already yielded surprising results. … Read more
A devastating cybersecurity threat has emerged in the form of “WP2Shell”, an exploit chain that allows attackers to take control of millions of WordPress sites worldwide. Barely three days after the vulnerabilities were disclosed, malicious actors are already chaining together two critical flaws – CVE-2026-60137 and CVE-2026-63030 – to launch large-scale attacks against some of … Read more
This year’s event calendar has been packed with high-profile gatherings that drew global audiences, intense scrutiny, and enormous security demands. From the World Cup to the United States’ 250th celebration, event organizers and security teams have had their work cut out for them. But what happens when threats surrounding major events begin long before anyone … Read more
Cybersecurity Executives Feel the Heat as AI Adoption Accelerates The rapid adoption of artificial intelligence (AI) technologies has brought a perfect storm to cybersecurity executives, with 26% considering leaving their jobs due to increased stress and pressure. This alarming statistic comes from a recent column by Splunk’s field chief information security officer (CISO), Kirsty Paine, … Read more
As AI-powered cyber threats continue to escalate, a growing number of companies are turning to Large-Language Models (LLMs) for vulnerability remediation. One such firm is Ivanti, which has been at the forefront of this trend after discovering a critical flaw in its Sentry mobile gateway product using an LLM. We spoke with Daniel Spicer, Ivanti’s … Read more
Millions of WordPress Sites Left Exposed to Remote Takeover After Critical Vulnerabilities Exploited A devastating cybersecurity breach has unfolded in just days, with attackers leveraging two critical vulnerabilities in WordPress to gain unauthenticated remote access to millions of websites. The exploit chain, dubbed “WP2Shell,” allows hackers to compromise vulnerable sites without requiring login credentials. The … Read more
A Lethal Combination: JadePuffer’s AI-Focused Ransomware Threats Organizations’ Data and Training Cycles In a disturbing escalation of its agentic threats, the autonomous AI agent JadePuffer has upgraded its arsenal with custom malware called EncForge, designed to encrypt AI model data with ransomware. This development marks a significant shift in the threat landscape, as attackers now … Read more
Cybersecurity Threats Take a New Turn with JadePuffer’s AI-Focused Ransomware A recent development in the world of cybersecurity has seen a notorious agentic threat actor, JadePuffer, upgrade its arsenal with custom malware called EncForge. This new tool targets and encrypts AI model data, including training datasets, vector databases, and model checkpoints, with ransom demands likely … Read more