Collaborate Disseminate
Analysts worry lazy users could have agents complete mandatory infosec training, and attackers could do far nastier things Agentic browsers are too risky for most organizations to use, according to analyst firm Gartner.… Continue reading Block all AI browsers for the foreseeable future: Gartner
PLUS: South Korea to strengthen security standards; Canon closes Chinese printer plant; APAC datacenter capacity to triple by 2029; And more Asia In Brief Chinese rocketry outfit LandSpace last week flew what it hoped would be the country’s first reus… Continue reading China’s first reusable rocket explodes, but its onboard Ethernet network flew
PLUS: New kind of DDOS from the Americas; Predator still hunting spyware targets; NIST issues IoT advice; And more! Infosec in Brief The Apache Foundation last week warned of a 10.0-rated flaw in its Tika toolkit.… Continue reading Apache warns of 10.0-rated flaw in Tika metadata ingestion tool
Wanna know a secret? Whether you’re logging into your bank, health insurance, or even your email, most services today do not live by passwords alone. Now commonplace, multifactor authentication (MFA) requires users to enter a second or third proof of i… Continue reading Death to one-time text codes: Passkeys are the new hotness in MFA
Proof of life? Or an active social media presence? Criminals are altering social media and other publicly available images of people to use as fake proof of life photos in “virtual kidnapping” and extortion scams, the FBI warned on Friday. … Continue reading Crims using social media images, videos in ‘virtual kidnapping’ scams
Who needs JavaScript? Security researcher Lyra Rebane has devised a novel clickjacking attack that relies on Scalable Vector Graphics (SVG) and Cascading Style Sheets (CSS).… Continue reading Novel clickjacking attack relies on CSS and SVG
Security community needs to rally and share more info faster, one researcher says Amid new reports of attackers pummeling a maximum security hole (CVE-2025-55182) in the React JavaScript library, Cloudflare’s technology chief said his company took down… Continue reading Cloudflare blames Friday outage on borked fix for React2shell vuln
Laptop maker says a vendor breach exposed some phone camera code, but not its own systems Asus has admitted that a third-party supplier was popped by cybercrims after the Everest ransomware gang claimed it had rifled through the tech titan’s internal f… Continue reading Asus supplier hit by ransomware attack as gang flaunts alleged 1 TB haul
State-backed attackers started poking flaw as soon as it dropped – anyone still unpatched is on borrowed time Amazon has warned that China-nexus hacking crews began hammering the critical React “React2Shell” vulnerability within hours of disclosure, tu… Continue reading Beijing-linked hackers are hammering max-severity React bug, AWS warns
Plan would create statutory powers for police use of biometrics, prompting warnings of mass surveillance The UK government has kicked off plans to ramp up police use of facial recognition, undeterred by a mounting civil liberties backlash and fresh war… Continue reading UK pushes ahead with facial recognition expansion despite civil liberties backlash