Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The Technical University of Denmark suffered a security breach where attackers accessed its identity and access management system and exfiltrated data belonging to up to 200,000 users. The incident underscores the vulnerability of centralized identity platforms in academic environments.
This article examines how core areas of cybersecurity are evolving in response to the expansion of cloud, AI, and distributed systems. It covers identity security, telemetry management, and other key segments, emphasizing the need for continuous visibility and control.
A federal judge dismissed a lawsuit filed by Salvadoran journalists who claimed they were targeted with NSO Group's Pegasus spyware, ruling that the court lacked jurisdiction in California. The decision deals a blow to efforts to hold spyware makers accountable in U.S. courts and highlights procedural barriers for foreign plaintiffs.
This article introduces RemoteThreat, a startup that offers advanced red teaming services designed to simulate real-world attacker behaviors after initial defenses are breached. The company seeks to help security teams improve their detection and response capabilities by testing scenarios that go beyond traditional penetration testing.
This article reports on two new bipartisan bills in the U.S. Congress aimed at restricting the use of automated license plate readers (ALPRs) by law enforcement. The legislation, introduced by senators from both parties, seeks to address privacy concerns over the widespread collection and retention of license plate data without judicial oversight.
Frontline Education is notifying school districts about a data breach where attackers used a vulnerability in third-party software to access its systems and exfiltrate employee data, including Social Security numbers. The incident underscores the supply chain risks facing educational technology providers and the potential for widespread exposure of personal information.