CISA credential leak prompts tighter security measures
A major credential leak spurred the Cybersecurity and Infrastructure Security Agency to strengthen protections for its sensitive materials, improve how […]
Integrity Verification for AI Agent Supply Chains
Executive Summary AI agents now extend their capabilities by installing third-party skills the way smartphones install apps. Anyone can publish
European Commission Chooses to Keep EU Users Locked Up Behind Big Tech’s Gates
Users are always seeking more control over their social networking experience to make it better, whether to improve privacy or
A Fresh Start: Why New Beginnings Motivate Us
January always carries a certain shift in energy. The pace slows for a moment, the inbox resets, and we convince
Introduction to COM usage by Windows threats
Component Object Model (COM) is a fundamental Windows technology used by legitimate applications for object activation, inter-process communication, automation and language-independent component reuse. Those same qualities
Living Off the Pipeline: Defending Against CI/CD Subversion
The software supply chain has become one of the most attractive targets for modern adversaries, but the attacks seen in
How Google And AI Nearly Made A Seasoned Reporter Spiral
from the truth-and-fiction-and-ai dept This story was originally published by ProPublica. Republished under a CC BY-NC-ND 3.0 license. Last month, my colleagues and I published
ISO 27001 Certified But is Your AWS Environment Actually Secure?
ISO 27001 certification is no small undertaking. Organisations typically spend several months working through risk identification, control implementation, internal auditing
The Gentlemen RaaS: rapid growth and a new ransomware variant
Introduction This year saw the emergence of The Gentlemen, a prominent example of a group operating under the ransomware-as-a-service (RaaS)
Cyber-Enabled Maritime Sanctions Evasion
Executive Summary Iranian and Russian shadow fleet vessels, along with multiple sanctions evasion networks (SENs), are using online infrastructure likely