20 article(s) in our index mention this organisation.
Dark Reading's research, led by Nick Kakolowski, indicates that AI is reshaping cybersecurity teams, not by replacing them, but by enabling them to do more with the same headcount. However, the rapid influx of AI-powered…
The UK's data protection watchdog, the ICO, has undergone a significant governance overhaul, including a new legal identity, a corporate board, and a move to Manchester.
While the exact method used remains unclear, the incident highlights a broader trend of fuel theft and fraud targeting gas stations, ranging from physical manipulation of pumps and systems to remote control access and so…
Doubts are growing over claims that an OpenAI agent hacked an Australian Medicare portal. The incident highlights a potential misconfiguration that allowed the agent to access data without requiring credentials, and sepa…
Threat actors are leveraging malicious Terraform providers and Go Modules to distribute Go-based malware, marking a new tactic in their ongoing campaign attributed to North Korean (DPRK) threat actors.
Despite concerns about the actual return on investment, CISOs are significantly increasing their cybersecurity budgets to incorporate AI, driven largely by fear of falling behind competitors and the accelerating pace of…
The US government has disrupted a Chinese hacking platform and botnet, QTFY, used by Chinese threat actors to target military and critical infrastructure systems in the United States. The disruption targeted QScan and QT…
Xpander, a startup founded by former AWS engineers, has secured $7.5 million in seed funding to help organizations manage and deploy AI agents. The platform aims to simplify AI adoption and governance for businesses stru…
The UK criminal records office, ACRO, suffered three undetected intrusions over two years due to severe security failings, including unaddressed vulnerabilities in its public-facing website and ignored cybersecurity aler…
A House Committee investigation, spurred by the Salt Typhoon hack, revealed that Chinese telecommunications giants – China Mobile, China Unicom, and China Telecom – maintain a significant and deeply embedded presence in…
HashiCorp, Veeam, and Django have released critical patches to address several vulnerabilities, including a cross-tenant credential reuse flaw in Terraform MCP Server, a multi-tenant console credential impersonation issu…
A sophisticated supply chain attack, dubbed ChainDrop, has infected over 2,200 malicious versions of 440 NPM packages, resulting in over 500 million weekly downloads. The attack began with a compromised GitHub account an…
The former UK Information Commissioner, John Edwards, is preparing to sue a female employee at the Information Commissioner’s Office (ICO) who reported concerns about his behavior. This follows an independent investigati…
Operation Escaneo, a coordinated cyber campaign led by the MexicanMafia/PanchoVilla threat actor, represents a significant shift in the threat landscape of Latin America. The campaign, spanning 2025-2026, targeted critic…
Google plans to begin using IP addresses from August 3, 2026, across the EEA, UK, and Switzerland for ad measurement and personalization. This shift is driven by regulatory changes regarding personal data, particularly u…
A coordinated malware campaign involving 15 malicious plugins for the JetBrains Marketplace was discovered, designed to steal AI API keys from developers. These plugins, disguised as AI coding assistants and code review…
Over 400 Arch Linux packages within the AUR repository have been compromised, distributing a Linux rootkit and infostealer malware designed to steal developer credentials and access tokens. The attack involved a maliciou…
Great Marlow School in Buckinghamshire, England, experienced a cybersecurity incident that forced the closure of the school for a second day, impacting students and staff. The incident, potentially linked to ransomware a…
A malicious NuGet package, 'Sicoob.Sdk,' disguised as a C# SDK for Sicoob, Brazil's largest cooperative financial system, was discovered to be stealing client IDs and PFX certificates. This allowed unauthorized access to…
This article reports on the development of DockSec, an open-source tool designed to address the challenge of vulnerability detection in Docker images. The tool utilizes an LLM to correlate findings from multiple vulnerab…
