ShadyPanda Takes its Time to Weaponize Legitimate Extensions
ShadyPanda has been playing the long game. Over the last seven years, the group has been uploading malicious extensions on...
Blog
Intellexa Leaks Reveal Zero-Days and Ads-Based Vector for Predator Spyware Delivery
A human rights lawyer from Pakistan's Balochistan province received a suspicious link on WhatsApp from an unknown number, marking the...
“Getting to Yes”: An Anti-Sales Guide for MSPs
Most MSPs and MSSPs know how to deliver effective security. The challenge is helping prospects understand why it matters in...
CISA Reports PRC Hackers Using BRICKSTORM for Long-Term Access in U.S. Systems
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday released details of a backdoor named BRICKSTORM that has been...
Introducing Sophos Intelix for Microsoft 365 Copilot
We’re thrilled to unveil Sophos Intelix for Microsoft 365 Copilot, a powerful new integration that brings world-class threat intelligence from...
Introducing Sophos Intelix for Microsoft Security Copilot
Sophos is excited to announce the launch of the new Sophos Intelix for Microsoft Security Copilot agent, now available in...
Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture
Business Security Identity is effectively the new network boundary. It must be protected at all costs. Phil Muncaster 04 Dec...
CrowdStrike Extends Scope of AWS Cybersecurity Alliance
CrowdStrike this week extended its alliance with Amazon Web Services (AWS) to automate configuration of its Falcon security information event...
JPCERT Confirms Active Command Injection Attacks on Array AG Gateways
Dec 05, 2025Ravie LakshmananVulnerability / Network Security A command injection vulnerability in Array Networks AG Series secure access gateways has...
Project View: A New Era of Prioritized and Actionable Cloud Security
Cloud Risk Management: Actionable Cloud Security | Trend Micro (US) Content has been added to your Folio Go to Folio...
U.S. CISA adds a new an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a new an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December 04, 2025 U.S....
Marquis data breach impacted more than 780,000 individuals
Marquis data breach impacted more than 780,000 individuals Pierluigi Paganini December 04, 2025 Hackers breached fintech firm Marquis, stealing personal...
SMS Phishers Pivot to Points, Taxes, Fake Retailers
China-based phishing groups blamed for non-stop scam SMS messages about a supposed wayward package or unpaid toll fee are promoting...
Speed Without Breach: Engineering the Controls for AI-Driven Software
Speed Without Breach: Engineering the Controls for AI-Driven Software As AI accelerates software delivery, unguarded use introduces avoidable risks; secrets...
ASUS confirms vendor breach as Everest gang leaks data, claims ArcSoft and Qualcomm
ASUS confirms vendor breach as Everest gang leaks data, claims ArcSoft and Qualcomm Pierluigi Paganini December 04, 2025 ASUS confirms...