'Claudy Day’ Trio of Flaws Exposes Claude Users to Data Theft
A prompt injection vulnerability paired with other flaws can turn a Google search into a full attack chain that could threaten enterprise networks.
DarkSword: iPhone Exploit Kit Serves Spies & Thieves Alike
A sophisticated iOS exploit chain leverages multiple zero-day vulnerabilities and is targeting users in Saudi Arabia, Turkey, Malaysia, and Ukraine.
C2 Implant 'SnappyClient' Targets Crypto Wallets
In addition to enabling remote access, the malware supports a wide range of capabilities, including data theft and spying.
EU Sanctions Companies in China, Iran for Cyberattacks
These rulings prohibit the entities from entering or doing business in the European Union.
Post-Quantum Web Could be Safer, Faster
Major providers are testing a quantum-safe version of HTTPS that shrinks certificates to one-tenth their previous size, decreasing latency and adding transparency.
Native Launches With Security Control Plane for Multicloud
The cloud security startup's platform translates and enforces security policies across AWS, Azure, Google Cloud, and Oracle using provider-native controls.
_Olekcii_Mach_Alamy.jpg?width=1280&auto=webp&quality=80&disable=upscale)
With Government's Role Uncertain, Businesses Unite to Combat Fraud
Major industry leaders agree to share information and collaborate to boost defenses in the wake of distressing online scams.
AI Conundrum: Why MCP Security Can't Be Patched Away
RSAC Conference Preview: MCP introduces security risks into LLM environments that are architectural and not easily fixable, researcher says.
Interlock Ransomware Targets Cisco Enterprise Firewalls
The ransomware gang, known for double-extortion attacks, had access to a critical Cisco firewall vulnerability weeks before it was publicly disclosed.
Cyber OpSec Fail: Beast Gang Exposes Ransomware Server
Files on a central cloud server used by the ransomware group highlight a systematic, aggressive attack on network backups as a key TTP.
Patch Now: Oracle's Fusion Middleware Has Critical RCE Flaw
Attackers can execute arbitrary code without authentication if Oracle's Identity or Web Services Managers are exposed to the Web.
AI Dominates RSAC Innovation Sandbox
The 10 finalists will each have three minutes to make their case for being the most innovative, promising young security company of the year.