22 article(s) in our index mention this organisation.
The traditional annual penetration test is becoming obsolete due to attackers’ rapid response times and the increasing use of AI to quickly exploit vulnerabilities. A new CISO guide advocates for ‘agentic pentesting’ – u…
A massive dump of stolen infostealer logs, containing 5,871 infected machines across 162 countries, has exposed a wealth of AI-related credentials and API keys. The data includes session tokens, JWTs, and JWEs for servic…
A Brazil-based cybercrime group, known as Slim Spider, has been linked to a multi-stage intrusion campaign targeting Brazilian financial institutions since March 2026. The group leverages sophisticated cloud attack techn…
The Brazilian cybercrime group ‘Breeze Comet’ (formerly UNC5669) is aggressively targeting financial institutions and government organizations across Brazil and increasingly in other countries like Nigeria, Paraguay, Gha…
The threat actor Breeze Comet (formerly UNC5669), operating out of Brazil since 2023, has been aggressively targeting financial services, retail, and e-commerce organizations in Brazil and expanding into Latin America an…
As AI agents increasingly take on tasks traditionally performed by humans, including hacking, a new attack surface is emerging. Companies are now facing a surge in AI-enabled phishing, impersonation, and reconnaissance,…
A former Snowflake customer account manager, Connor Riley Moucka, pleaded guilty to computer fraud and wire fraud, admitting to stealing data and extorting victims. The breaches impacted at least 165 organizations and ex…
The U.S. government is deploying a new AI-powered system, Gold Eagle, to proactively identify and remediate software vulnerabilities across federal agencies and critical infrastructure. This initiative is driven by the i…
Abstract Security, a composable security operations platform provider, raised $25 million in a new funding round, significantly boosting its valuation and allowing it to expand its platform’s capabilities and go-to-marke…
Google is implementing an ‘agentic defense’ strategy, leveraging its acquisition of Wiz to automate threat detection and response in a rapidly evolving cybersecurity landscape. This involves deploying AI-powered agents a…
Attackers exploited a critical vulnerability in Cisco Catalyst SD-WAN Controller (CVE-2026-20245) approximately two months before Cisco publicly disclosed it. The vulnerability, stemming from insufficient input validatio…
Google’s Threat Intelligence Group (GTIG) discovered and disrupted a year-long espionage campaign by the China-Nexus threat actor, UNC6508, targeting US academic, medical, and military research institutions. The actor ut…
The ShinyHunters extortion group exploited a zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft to gain unauthorized access to university systems, resulting in data theft and a demand for payment. Mandiant iden…
A critical zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft PeopleTools has been exploited by the ShinyHunters ransomware gang to steal data from numerous organizations. Oracle has released mitigations, but t…
The Silent Ransom Group is aggressively targeting U.S. law firms through sophisticated social engineering attacks, primarily involving fake IT support calls. These attacks begin with phishing emails and escalate to remot…
Cisco has issued a security advisory regarding a newly discovered zero-day vulnerability (CVE-2026-20245) within its SD-WAN Manager product. This vulnerability, exploitable via command injection, has been actively used b…
Cyber insurance premiums are decreasing, driven by insurers refining their risk models and offering discounts for robust security practices. However, this positive trend is counterbalanced by a significant increase in co…
Google has launched an AI-powered cybersecurity platform, AI Threat Defense, designed to proactively combat increasingly sophisticated cyberattacks leveraging artificial intelligence. This platform utilizes AI to identif…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive requiring federal agencies to patch a critical SQL injection vulnerability (CVE-2026-9082) in the Drupal content management system.…
This article highlights a growing cybersecurity crisis driven by the rapid proliferation of vulnerabilities and the decreasing time it takes for attackers to exploit them. The analysis, primarily based on a Black Kite re…
