RiskX interview video featuring Colin Mahony and Mastercard’s Aditi Sawhney
Every fraud investigator knows the pattern: the fraudulent charge is the first thing anyone notices and the last thing the […]
Data Security
Wireshark 4.6.7 Fixes 12 Security Flaws Across Protocols
The latest Wireshark 4.6.7 maintenance release addresses twelve security vulnerabilities that could affect users analyzing network traffic. Since packet captures processed in
Latvian forestry company still restoring systems weeks after ransomware attack
Latvia’s state-owned forestry company, LVM, said on Thursday it is still working to restore its IT systems weeks after a
Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE
Executive Summary We discovered a vulnerability in the Google Cloud Vertex AI software development kit (SDK) for Python, and responsibly
Turn Blind Trust into Verified Control with Prompt Security for Agentic AI
Agentic AI is no longer theoretical. It’s already embedded across enterprises inside developer workflows, SaaS platforms, and operational pipelines. It
Falcon Secure Access Sets Standard for Zero Trust Browser Security
The browser has become the enterprise workspace. Employees, contractors, partners, and third parties use browsers to access SaaS applications, internal
State Digital Surveillance Risk Landscape
These capabilities generally facilitate access to “content data” (referring to the actual content of intercepted traffic), “communications data” (also known
CERT Warns Of Tenda Firmware Backdoor
The CERT Coordination Center (CERT/CC) has disclosed a critical security issue affecting multiple Tenda networking devices. Tracked as CVE-2026-11405, the
Greek victims file lawsuit against Intellexa over Predator spyware
Eight Greeks who were snooped on by Predator spyware sued the surveillance tech manufacturer Intellexa on Tuesday, as well as
Universal Bucket Hijacking Technique for Cloud Data Exfiltration
Executive Summary We recently identified a bucket hijacking technique impacting multiple services across major cloud service providers (CSPs). The attack