Trezor Scrambles to Contain Phishing Campaign After Brevo Email Provider Breach A staggering 347,000 Trezor customers have been targeted in a recent wave of phishing attacks, with 2,500 users falling prey to malicious emails sent from compromised email accounts. The campaign, which exploited the security breach at third-party email provider Brevo, highlights the vulnerability of … Read more
Critical Flaws in Cisco FMC Software Expose Users to Ransomware Attacks and Credential Theft A pair of severe vulnerabilities in Cisco’s Firepower Management Center (FMC) software has left organizations exposed to a range of cyber threats, including ransomware attacks and credential theft. The flaws, which have been actively exploited by attackers, put users at risk … Read more
The print management software company PaperCut has issued emergency patches for two actively exploited vulnerabilities, but instead of replacing them with more comprehensive fixes, they’re providing a new set of patches that address these specific issues. This decision comes as a surprise to security experts, who warn that this approach may not be sufficient to … Read more
A sophisticated cyberattack attributed to a China-linked threat actor, UNC3569, has been discovered exploiting a vulnerability in Sogou Input Method, a popular Chinese input method editor (IME) used on millions of devices. The attackers leveraged this weakness to deploy a backdoor known as GRAYRABBIT, highlighting the risks of identity exposure and active attack paths. The … Read more
**Attackers Exploit JFrog Artifactory Flaws, Gain Admin Control and Plant Backdoors** A sophisticated attack has been discovered targeting JFrog Artifactory users, allowing malicious actors to gain admin control and plant backdoors on affected systems. The vulnerability, which was chained with identity exposure, allowed attackers to bypass security measures and establish a foothold in compromised networks. … Read more
The Unlikely Path to Cybersecurity Leadership: A Conversation with Vinnie Liu Vinnie Liu’s journey into the world of cybersecurity is a fascinating one, marked by an early start and a unique blend of curiosity and humility. At just 17 years old, he was recruited by the National Security Agency (NSA), where he spent two years … Read more
A Warning from Within: AI Insider Sounds Alarm on Unchecked Development Artificial intelligence researchers and developers have long warned about the potential dangers of creating superintelligent machines that could surpass human control. Now, a prominent researcher has come forward with a stark warning: the current pace of AI development is putting humanity at risk, and … Read more
August 2026 saw a surge in cybersecurity-related merger and acquisition (M&A) deals, with a total of 33 announced transactions that will significantly impact the industry. This month’s round-up highlights some of the most notable acquisitions, which demonstrate a shift towards integrating AI-driven technologies into existing platforms, expanding global reach, and enhancing cybersecurity capabilities. Brinqa, a … Read more
Amazon Strengthens Its Board with Cybersecurity Expert Kevin Mandia In a significant move to bolster its cybersecurity expertise, Amazon has appointed veteran Kevin Mandia to its board of directors. With over 30 years of experience responding to cyber threats across the public and private sectors, Mandia brings a wealth of knowledge to the table at … Read more
A Conti Ransomware Gang Member’s Downfall: 4-Year Prison Sentence Handed Down In a significant blow to the notorious Conti ransomware gang, one of its members has been sentenced to four years in prison for his role in the group’s massive cyberattacks between 2021 and 2022. Oleksii Lytvynenko, a 44-year-old Ukrainian national, was arrested by Irish … Read more