î „Ravie Lakshmananî ‚May 31, 2026IoT Security / Network Security The takedown of a botnet that enslaved millions of infected devices, including computers, tablets, smartphones, and IoT devices, for malicious attacks has been announced by Dutch authorities. The bot network, as per …
Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices Read More »
Presented by Veriff Americans struggle to differentiate between real and AI-generated content, posing a significant challenge for businesses relying on online identity verification. Recent research reveals that despite awareness of deepfakes, people’s ability to recognize them is only slightly better …
Cybersecurity experts have revealed a vulnerability in OpenAI ChatGPT that exploits the AI assistant’s trust in Markdown links and images, potentially opening the door to phishing attacks. The technique, known as ChatGPhish by Permiso Security, takes advantage of ChatGPT’s auto-fetching …
ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface Read More »
DataGrail Report Highlights Challenges in Trusting Data Processing Agreements According to DataGrail’s Privacy and AI Trends Report 2026, the data processing agreement (DPA) that companies rely on to assess how vendors handle personal data can no longer be taken at …
DataGrail report finds your vendor may be sending data to AI models you never approved Read More »
Two separate banking trojan campaigns are targeting Latin America and Europe, infecting Windows and Android devices with Grandoreiro and BTMOB malware, respectively, as reported by WatchGuard and ESET. These campaigns are aimed at companies in Spain, Portugal, Mexico, and mobile …
Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users Read More »
The Changing Landscape of Cyber Threats in Financial Services A recent report by CrowdStrike highlighted the increasing threat posed by cyber attackers to the financial services sector. Interestingly, the attacker who targeted the most financial services organizations in the past …
î „Ravie Lakshmananî ‚May 25, 2026Cybersecurity / Hacking Monday recap. Same mess, new week. A sketchy dev tool got people pwned, old bugs came back from the dead, and security products somehow needed protecting from themselves. A bunch of companies spent the …
Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos Read More »
Recently, there have been alarming incidents of malicious npm packages passing Sigstore provenance verification due to compromised signing certificates. These events highlight the limitations of automated trust signals and the need for enhanced security measures. Another concerning incident involved the …
Valid certificates, stolen accounts: how attackers broke npm's last trust signal Read More »
î „Ravie Lakshmananî ‚May 23, 2026Software Supply Chain / DevSecOps GitHub recently introduced new controls for npm to enhance the security of the software supply chain. The new feature, staged publishing, allows maintainers to approve a release before it is publicly available …
npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks Read More »
The compliance dashboard was green across every identity control. And the attacker was already inside, moving laterally through Active Directory with a valid session token, escalating privileges on a trajectory toward the domain controller. This is the scenario playing out …
MFA verifies who logged in. It has no idea what they do next. Read More »
