Step Into the Password Graveyard… If You Dare (and Join the Live Session)
Oct 08, 2025The Hacker NewsPassword Security / Cyber Attacks Every year, weak passwords lead to millions in losses — and...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Severe Figma MCP Vulnerability Lets Hackers Execute Code Remotely — Patch Now
Oct 08, 2025Ravie LakshmananVulnerability / Software Security Cybersecurity researchers have disclosed details of a now-patched vulnerability in the popular figma-developer-mcp...
Law Enforcement Pressure is Reshaping the Global Ransomware Threat Landscape
Check Point’s quarterly Ransomware Report reveals dramatic changes in the global ransomware landscape. In Q2 2025, once-dominant ransomware-as-a-service (RaaS) groups, including Lockbit...
Turn Compliance into a Competitive Advantage: How to Scale Privacy-Aligned Services
For most Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs), compliance has long been a double-edged sword. ...
Roll your own bot detection: fingerprinting/JavaScript (part 1)
This is the first article in a two-part series where we show how to build your own anti-bot system to...
How Your AI Chatbot Can Become a Backdoor
Generative AI (GenAI), particularly large language model (LLM) chatbots, transformed how businesses interact with customers. These AI systems offer unprecedented...
U.S. CISA adds Synacor Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Synacor Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 07, 2025...
GoAnywhere MFT zero-day used by Storm-1175 in Medusa ransomware campaigns
GoAnywhere MFT zero-day used by Storm-1175 in Medusa ransomware campaigns Pierluigi Paganini October 07, 2025 Storm-1175 exploits GoAnywhere MFT flaw...
ShinyHunters Wage Broad Corporate Extortion Spree
A cybercriminal group that used voice phishing attacks to siphon more than a billion records from Salesforce customers earlier this...
AI testing – harder than it looks
As AI overload becomes a real thing, ominous, outsized claims are becoming annoyingly de rigueur. But testing those claims against...
Fostering Innovation with Secure Machine Identities
How Safe Are Your Machine Identities in the Face of Innovation? Innovation is non-negotiable for staying competitive. Yet, how many...
Justifying Investments in NHI Security
How Can Non-Human Identities Bridge Security Gaps in Cloud Environments? Have you considered how the management of Non-Human Identities (NHIs)...
Enhancing Data Protection with Advanced PAM Techniques
How Do Advanced PAM Techniques Enhance Data Protection? Where cybersecurity threats are constantly evolving, how can organizations ensure that their...
Reassuring Stakeholders with Solid Secrets Management
How Can Non-Human Identities Transform Secrets Management? Imagine where machine identities, much like human ones, silently pave the way for...
Why SOCs Are Turning to Autonomous Security Operations: It’s Time Automation Worked For You
Attackers now use AI to phish, probe defenses, and move faster. Volume is up. Speed is up. Impact is up....
