Half of Ransomware Access Due to Hijacked VPN Credentials
Ransomware surged in Q3 2025, with just three [...]
ServiceNow AI Agents Can Be Tricked Into Acting Against Each Other via Second-Order Prompts
Nov 19, 2025Ravie LakshmananAI Security / SaaS Security [...]
Salesforce Flags Unauthorized Data Access via Gainsight-Linked OAuth Activity
Nov 21, 2025Ravie LakshmananData Breach / SaaS Security [...]
Cyber Insurance Won’t Save You from Bad Hygiene
Why foundational failures still cost companies, even when [...]
APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ Domains
A China-nexus threat actor known as APT24 has [...]
IoT vendors faulted for slow progress in setting up vulnerability disclosure programs
John Leyden 24 January 2023 at 13:22 UTC [...]
Salesforce Gainsight compromise: Early findings and customer guidance
In the wake of Salesforce’s announcement about “unusual [...]
TamperedChef Malware Spreads via Fake Software Installers in Ongoing Global Campaign
Nov 20, 2025Ravie LakshmananMalvertising / Artificial Intelligence Threat [...]
ToddyCat APT’s new tools and techniques
Introduction Email remains the main means of business [...]
Is your password manager truly GDPR compliant?
Passwords sit at the core of every critical [...]