That “job brief” on Google Forms could infect your device
We’ve identified a campaign using business-related lures, such as job interviews, project briefs, and financial document, to distribute malware,...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Inside AutoSecT: How AI Agents Are Transforming Software Composition Analysis
Most SCA tools do one thing: they tell you when something’s vulnerable. AutoSecT has expanded its scope by incorporating...
Apple urges iPhone users to update as Coruna and DarkSword exploit kits emerge
Apple urges iPhone users to update as Coruna and DarkSword exploit kits emerge Pierluigi Paganini March 20, 2026 Apple warns...
Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operators
Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operators Pierluigi Paganini March 20, 2026 DoJ disrupted IoT botnets’ C2...
GUEST ESSAY: Executives trust AI security even as security teams confront blind spots, new risks
By Daniel Bardenstein In our recent report, Beyond the Black Box, we found a striking gap: 80% of executives...
Securing Third-Party Procurement Platforms with Enterprise SSO
Introduction Procurement is no longer a back-office function handled through spreadsheets and manual approvals. Modern enterprise teams depend on...
Securing E-commerce Transactions with Modern Authentication
Image Source: Pexels How many packages has your business lost during shipping? If you don’t have shipping insurance, any...
Google Adds 24-Hour Wait for Unverified App Sideloading to Reduce Malware and Scams
Ravie LakshmananMar 20, 2026Data Privacy / Mobile Security Google on Thursday announced a new "advanced flow" for Android sideloading that...
The Importance of Behavioral Analytics in AI-Enabled Cyber Attacks
The Hacker NewsMar 20, 2026Artificial Intelligence / Data Protection Artificial Intelligence (AI) is changing how individuals and organizations conduct many...
Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover
Ravie LakshmananMar 20, 2026Web Security / Vulnerability Sansec is warning of a critical security flaw in Magento's REST API that...
RSAC 2026 Innovation Sandbox | Humanix: People-Oriented Social Engineering Attack Detection and Response
Company Profile Humanix (see Figure 1) is a cybersecurity company focusing on human-centric threat detection and response, dedicated to...
What to Do When Your Website Is Under a DDoS Attack
The post What to Do When Your Website Is Under a DDoS Attack first appeared on StrongBox IT. ***...
DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks
Ravie LakshmananMar 20, 2026Botnet / Network Security The U.S. Department of Justice (DoJ) on Thursday announced the disruption of command-and-control...
Apple Warns Older iPhones Vulnerable to Coruna, DarkSword Exploit Kit Attacks
Ravie LakshmananMar 20, 2026Mobile Security / Malware Apple is urging users who are still running an outdated version of iOS...
EDR killers explained: Beyond the drivers
In recent years, EDR killers have become one of the most commonly seen tools in modern ransomware intrusions: an attacker...
