How this ClickFix campaign leads to Redline Stealer
An overwhelming share of the user credentials that are later abused in identity-based attacks arise from the compromise of unmanaged user devices. “Infostealers” are the generic name given to the…
-
-
GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
In this article In October 2025, Microsoft Threat Intelligence identified destructive wiping activity and uncovered a sophisticated Go programming language (Golang)-based backdoor we now track as GigaWiper, a versatile implant…
-
Why we cannot wait for better post-quantum signature algorithms
RSA and ECC, cryptographic algorithms that we’ve all relied on for decades, are vulnerable to the attack of sufficiently advanced quantum computers. Such quantum computers do not exist yet, but…
-
Why Embedded Device Security Requires a Lifecycle Approach
For years, organizations treated operational technology (OT), Internet of Things (IoT), and embedded devices differently from traditional IT assets. Many of these systems were designed to operate for decades with…
-
Agentic AI identity: A 6-stage maturity model for non-human identities
A representative finding from current engagements: human identity governance at Stage 4 — central IAM, MFA, lifecycle managed — and agent governance at Stage 1, with agents recently inventoried but…
-
Heading to Vegas? Meet PortSwigger at Black Hat, BSides, and DEF CON 34.
Fran Hutchings | Thursday, 9 July 2026 at 09:20 UTC PortSwigger is heading to Las Vegas for one of the biggest weeks in the cybersecurity calendar. Across Black Hat USA,…
-
What Is Kali Purple and How Does It Improve Security Operations?
In order to understand what is Kali Purple, it’s important to recognize it as a defensive-oriented cyber security distribution designed to help organizations build, test, and improve their security operations. …
-
A Case Study in Red-Teaming a Government Education AI
The “black box” assessment represents the most authentic test of an AI system’s security. Unlike white-box testing, where the system prompt and architecture are known, black box red-teaming forces the…
-
Falcon Secure Access Sets Standard for Zero Trust Browser Security
The browser has become the enterprise workspace. Employees, contractors, partners, and third parties use browsers to access SaaS applications, internal web apps, admin consoles, collaboration tools, and AI services from…
-
Varonis Atlas Secures Cursor and the Agentic Development Lifecycle
Varonis Atlas is the first dedicated AI security platform to provide complete visibility and continuous control over Cursor usage to enable safe adoption and secure the AI development lifecycle.
