⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The article discusses how companies like Orbitz and Staples have used user data to show different prices to different customers. For example, Mac users were shown pricier hotel options, and zip codes influenced pricing for test prep courses.
Sophisticated iPhone exploit chains, previously limited to nation-states, are now spreading widely to organized cybercrime groups. The Coruna and DarkSword exploits are proliferating globally, increasing the threat to iOS users.
AWS has completed its 2026 CyberVadis assessment, achieving the highest score (Mature) in all areas. This demonstrates AWS's commitment to security and helps customers reduce their supplier due-diligence burden.
This article discusses how Model Context Protocol (MCP) turns Privileged Access Management (PAM) into an AI-ready source. It enables faster reporting and improved compliance visibility by allowing AI systems to interact with PAM data.
Microsoft disclosed that China-linked threat actor Storm-1175 deployed a new ransomware strain called StormEncryptor, marking a shift from Medusa ransomware. The group likely exploits CVE-2026-18577 in N-able Ncentral for initial access, a vulnerability flagged by CISA as actively exploited.
This article highlights how outdated cybercrime laws put security researchers at risk. A public policy expert mapped global laws to develop a five-point framework for protecting ethical hackers and good-faith security research.