A new breed of ransomware, dubbed “GodDamn,” has emerged in the US, utilizing a malicious yet Microsoft-approved driver to evade security software and wreak havoc on unsuspecting organizations. This sophisticated attack vector, known as BYOVD (Bring Your Own Vulnerable Driver), exploits a loophole in Windows kernel security, allowing attackers to kill security-related processes and disable … Read more
A Growing Threat: How AI Gateways Can Expose Organizations to New Risks As organizations increasingly rely on artificial intelligence (AI) to power their applications and workflows, they’re also creating new vulnerabilities that threat actors are all too eager to exploit. A recent incident highlights the risks associated with AI gateways, which can provide attackers with … Read more
As AI-powered agents increasingly become integrated into organizational workflows, many companies are struggling to keep pace with the unique security risks they pose. These autonomous entities, designed to automate tasks and make decisions on their own, are fundamentally different from traditional non-human identities such as service accounts or API tokens. If organizations continue to treat … Read more
European Organizations’ Collaboration Security Confidence Gap Exposed by New Survey A recent survey conducted by communications provider Wire has revealed a stark contrast between the security confidence of European IT professionals and the reality of their collaboration environments. Despite an impressive 84% of respondents expressing confidence in the security of their collaboration tools, the survey’s … Read more
As a growing number of organizations deploy AI gateways to manage access to foundation models, they are inadvertently creating a new surface for attackers to exploit. A recent incident highlights how a threat actor gained access to an EC2 server hosting an AI gateway connected to Amazon Bedrock services, using the access for cryptomining but … Read more
As Global Conflicts Go Digital, Businesses Need Wartime Gameplans The world of modern warfare has taken a drastic turn with the increasing involvement of cyberattacks. A recent incident involving a Ukrainian tax software company highlights the devastating impact that can occur when global conflicts go digital. Intellect Services, a mid-sized family-owned business in Ukraine, was … Read more
The Rise of AI Agents: A New Kind of Identity That’s Leaving Organizations Behind A growing number of organizations are struggling to keep pace with the emergence of AI agents, a new kind of identity that’s changing the way we think about security and governance. These non-human identities are not just another type of service … Read more
Microsoft has tackled another zero-day vulnerability published by a disgruntled security researcher, issuing an out-of-band patch for RoguePlanet, an elevation-of-privilege flaw in Windows Defender. The high-severity vulnerability could have allowed an attacker to escalate privileges on a Windows device from a basic user to the highest SYSTEM-level access, effectively granting them complete control over the … Read more
Microsoft has issued an emergency patch for a critical zero-day vulnerability in Windows Defender, dubbed RoguePlanet, which was made public by a disgruntled security researcher known as “Nightmare-Eclipse” just last month. The flaw, tracked as CVE-2026-50656, allows an attacker to escalate privileges on a Windows device from a basic user to the highest SYSTEM-level access, … Read more
Iran’s Cyber Crosshairs Focus Beyond Critical Infrastructure, Warning to All Organizations A recent spate of cyberattacks linked to Iran has sparked a false sense of security among companies that don’t operate in critical infrastructure sectors. These organizations assume they’re not at risk because they’re not high-profile targets like power grids or water utilities. However, the … Read more