Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Chrome 146 Introduces Device Bound Session Credentials to Neutralize Stolen Cookies
Google is rolling out Device Bound Session Credentials (DBSC) for all Chrome 146 users on Windows, positioning the feature as ...
OpenAI Revokes macOS Code Signing Certificate After Axios and Trivy Supply Chain Attacks
OpenAI has disclosed that a compromised Axios npm package was executed inside its macOS application signing pipeline on GitHub Actions. ...
FBI and Indonesian Police Take Down W3LL Phishing Kit Targeting Microsoft 365
US Federal Bureau of Investigation (FBI) agents, working with Indonesia’s National Police, have dismantled the infrastructure behind the W3LL phishing ...
Identity Dark Matter: Why Half of Corporate Access Remains Invisible and How IVIP Changes That
As large enterprises expand their digital footprint, classical Identity and Access Management (IAM) platforms are reaching their limits. User accounts, ...
Quantum Breakthroughs Intensify Threat to Elliptic-Curve Cryptography
Two independent research teams have released preprints indicating that the quantum resources required to break elliptic‑curve cryptography (ECC) may be ...
LinkedIn Browser Fingerprinting: Extension Scanning, Privacy Risks, and Security Claims
LinkedIn, the professional networking platform owned by Microsoft, has become the focus of a growing privacy debate after the German ...
Anthropic’s Project Glasswing: How Claude Mythos Changes Cybersecurity Risk
Anthropic has unveiled Project Glasswing, an initiative that deploys its new frontier AI model Claude Mythos to hunt and remediate ...
North Korean “Contagious Interview” Campaign Targets Go, Rust and PHP in Software Supply Chain Attacks
North Korean threat actors have significantly expanded the “Contagious Interview” software supply chain campaign, placing malicious packages across multiple open-source ...
ComfyUI Botnet Exploits Exposed Stable Diffusion Servers for Cryptomining and Proxy Abuse
A large-scale botnet campaign is actively compromising publicly accessible ComfyUI instances – a popular web interface for the Stable Diffusion ...
Dark Applications and AI Agents: Closing the Identity Confidence Gap in Zero Trust Programs
By 2026, many enterprises report mature identity and access management (IAM) and Zero Trust security programs on paper, yet their ...
