The year’s major cyber incidents, including China-linked telco attacks and the Ingram Micro ransomware hit, all point to a single, critical failure. Organizations simply couldn’t see what was happening inside their own networks, and attackers knew it.
As companies link AI systems across departments, they unlock huge value but also create new vulnerabilities. The biggest danger isn’t a single AI failing—it’s that failure spreading like wildfire.
Microsoft has confirmed that recent Windows 11 security updates are breaking VPN access for some users and causing RemoteApp failures in Azure Virtual Desktop. The company is investigating but has only provided a workaround for one of the issues. It’s another blow for IT admins trying to keep system
Critical authentication bypass vulnerabilities in Fortinet’s FortiOS and other products are being actively exploited just days after disclosure. Attackers are using them to steal configuration files and hashed credentials. CISA has added one to its must-patch list with a deadline of December 23.
A severe security vulnerability in the Motors WordPress theme, used by over 20,000 sites, has been patched. The bug let any logged-in user, even a basic Subscriber, upload and activate arbitrary plugins to gain full administrator control. Site owners must update to version 5.6.82 immediately.
The FTC has reached a proposed settlement with crypto company Nomad over a devastating 2022 cyberattack. The company must repay millions to users and overhaul its security after allegedly misleading customers.
A new report highlights a core problem in cloud and internet management: critical infrastructure is run by separate, siloed teams. This complexity makes outages harder to prevent and diagnose, even with unified tools. The proposed solution isn’t more consolidation, but better templates and simulatio
Chip interconnect specialist Arteris is moving to acquire security startup Cycuity. The deal aims to give engineers better tools to protect data as it flows through complex semiconductors, a growing concern for everything from data centers to cars.
A new report details a torrent of AI-powered holiday scams, with tens of thousands of phishing emails and fake ads detected in just two weeks. The technology is making fraudulent messages and websites nearly indistinguishable from the real thing.
Google is discontinuing its free dark web monitoring service, which alerts users when personal info like emails and phone numbers appears on shady parts of the internet. The company says the tool wasn’t providing “helpful next steps” and will focus on more actionable security features instead.
