A cybersecurity report reveals a massive breach cluster affecting about 50 global companies, from airlines to critical infrastructure. The attacker, known as Zestix, used old passwords stolen by infostealers to access corporate file-sharing platforms. The entire campaign was possible because none of
A U.S. appeals court panel appeared inclined to allow lawsuits alleging social media platforms are addictive to young users to proceed. Judges questioned whether it was too early for the companies to claim immunity under Section 230.
A new security standard is locking down verifiable credentials. The EUDI wallet’s High Assurance Interoperability Profile (HAIP) 1.0, published in December 2025, now requires DPoP to prevent stolen token attacks. Luckily, Spring Boot 3.5, released in May 2025, has native support.
The RondoDox botnet has escalated its attacks by weaponizing the critical React2Shell vulnerability. Researchers warn it’s actively scanning for and infecting vulnerable Next.js servers to install cryptominers and Mirai-based malware. This marks a significant expansion for a botnet known for targeti
Lockly unveiled a larger, more connected smart safe at CES. It promises fingerprint access in 0.2 seconds and deep ties to other Lockly devices. But the security and privacy implications of a Wi-Fi safe are worth a long, hard look.
Taiwan’s government faced an average of 2.4 million cyberattacks per day in 2024, a doubling from the previous year. Officials say most of the activity is linked to China and is part of a coordinated “grey-zone” pressure campaign.
According to TechRadar, Surfshark’s 2025 was all about infrastructure, not flashy features. They launched a patented self-healing VPN technology called Everlink and deployed their first 100Gbps bandwidth servers. CEO Vytautas Kaziukonis said the goal was to “significantly raise the bar for VPN perfo
A panel of security experts tells Dark Reading that 2026 is the year for CTOs to move beyond policy and into enforcement. The top resolutions focus on securing AI systems, the Model Context Protocol, and the software supply chain with concrete, operational controls.
Top executives are bracing for a surge in AI-driven cybersecurity threats as the technology matures. Their 2026 predictions paint a picture of a bumpy but transformative ride ahead for businesses and daily life.
Microsoft is making a major shift in Teams security, moving from optional to “secure by default.” Starting January 12, 2026, three key protections will be automatically enabled for all standard users. This aims to combat AI-driven phishing and malware.
