Nearly 90% of enterprises faced cybersecurity breaches last year, with 67% of business leaders citing insufficient employee security awareness as a primary factor, prompting organizations to enhance training programs amid rising AI-driven threats.
View full story…

The rapid advancement of AI technology is straining the U.S. energy grid, raising concerns about cybersecurity vulnerabilities and the nation’s competitive position in the global AI arms race.
View full story…

A critical deserialization vulnerability, CVE-2024-38094, in Microsoft SharePoint is being actively exploited, allowing attackers to execute arbitrary code and posing significant cybersecurity risks.
View full story…

The newly identified Embargo ransomware group has developed a sophisticated Rust-based toolkit, featuring MDeployer and MS4Killer, designed to bypass cybersecurity defenses and target both Windows and Linux systems in double-extortion attacks against US companies.
View full story…

Organizations face increasing identity-based attacks, particularly in SaaS environments, leading to a call for enhanced security measures and strategic advancements as highlighted by Okta’s new initiatives.
View full story…

A recent report reveals that 31% of organizations experienced a SaaS data breach in 2024, highlighting significant vulnerabilities due to a lack of centralized security measures and awareness among security practitioners.
View full story…

Private equity firms are increasingly at risk of cyberattacks, particularly during mergers and acquisitions, due to their handling of sensitive information and the growing prevalence of supply chain vulnerabilities.
View full story…

The WarmCookie malware, associated with the TA866 threat group, has been actively distributed since early 2024 and serves as an initial payload for further threats like CSharp-Streamer-RAT and Cobalt Strike, showcasing advanced capabilities and ongoing development.
View full story…

WordPress websites are increasingly compromised by the ClearFake and ClickFix campaigns, which exploit vulnerabilities to install malicious plugins that deceive users into downloading information-stealing malware.
View full story…

Nearly 75% of US Senate campaign websites are vulnerable to cyberattacks due to the absence of Domain-based Message Authentication, Reporting, and Conformance (DMARC) protections, risking sensitive information and the integrity of electoral communications.
View full story…

Retailers are facing over 500,000 daily AI-driven cyberattacks, leveraging generative AI and large language models, particularly during the critical holiday shopping season.
View full story…

Two Punjab National Bank employees, including a deputy manager, were arrested in Gurugram for facilitating a fraudulent bank account used to conceal embezzled funds in a cybercrime scheme.
View full story…

Broadcom has issued essential software updates to address severe security vulnerabilities CVE-2024-38812 and CVE-2024-38813 in VMware vCenter Server, which could allow remote code execution and system compromise.
View full story…

Cybersecurity researchers have discovered a series of malicious npm packages designed to harvest private keys and enable unauthorized access to systems of Ethereum wallet developers through an SSH backdoor.
View full story…