WhatsApp Adds One-Tap Security Settings for Added Privacy
Image: appshunter.io (Unsplash) If you’ve ever worried about who might try to reach you on WhatsApp, the company has a...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Survey Surfaces Lots of Room for DevSecOps Improvement
A survey of 506 cybersecurity leaders and practitioners working for organizations with more than 500 employees, published today, finds that...
Student Data at Risk: What the Victoria Education Breach Exposes About Public Sector Security
Cyber incidents in the public sector rarely begin with chaos. More often, they start quietly, with access that appears routine...
When MFA Fails Quietly: Inside the Rise of AiTM Phishing Attacks
Multi-factor authentication has long been treated as a security finish line. Once enabled, organizations assume that account takeover risks drop...
Coffee with the Council Podcast: PCI SSC Releases Version 2.0 of the PCI Secure Software Standard
Welcome to our podcast series, Coffee with the Council. I'm Alicia Malone, Director of Communications and Public Relations for the...
Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858)
Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858) Pierluigi Paganini January 28, 2026 Fortinet released fixes for a critical...
31 More Charged in Massive ATM Jackpotting Scheme Linked to Tren de Aragua Gang
An already expansive investigation into a widespread scheme to steal money from ATMs around the United States grew even larger...
How two companies are moving AI prototypes to production
He offered a number of examples involving AI in production. The company, for example, built a migration buddy agent to help...
Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware
Cybersecurity researchers have flagged a new malicious Microsoft Visual Studio Code (VS Code) extension for Moltbot (formerly Clawdbot) on the...
Russian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid
Ravie LakshmananJan 28, 2026Critical Infrastructure / Threat Intelligence The "coordinated" cyber attack targeting multiple sites across the Polish power grid...
Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution
Ravie LakshmananJan 28, 2026Vulnerability / Workflow Automation Cybersecurity researchers have disclosed two new security flaws in the n8n workflow automation...
From Triage to Threat Hunts: How AI Accelerates SecOps
If you work in security operations, the concept of the AI SOC agent is likely familiar. Early narratives promised total...
Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution
Ravie LakshmananJan 28, 2026Vulnerability / Open Source A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js...
Build Practical Cyber Defense Skills with This 5-Course Bundle
TL;DR: This $19.99 cybersecurity bundle includes five courses and lifetime access to in-demand tools, techniques, and real-world training. For IT...
Eeny, meeny, miny, moe? How ransomware operators choose victims
Counter Threat Unit™ (CTU) researchers are frequently asked about ransomware groups posing a threat to organizations in specific verticals or...
