Collaborate Disseminate
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Roundcube webmail software to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerabilities i… Continue reading CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog
With $5.5 trillion in global AI risk exposure and 700,000 U.S. workers needing reskilling, four new AI certifications and Certified CISO v4 help close the gap between AI adoption and workforce readiness.
EC-Council, creator of the world-renowned Certif… Continue reading EC-Council Expands AI Certification Portfolio to Strengthen U.S. AI Workforce Readiness and Security
Threat actors have been observed exploiting a recently disclosed critical security flaw impacting BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) products to conduct a wide range of malicious actions, including deploying VShell and&n… Continue reading BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration
In yet another software supply chain attack, the open-source, artificial intelligence (AI)-powered coding assistant Cline CLI was updated to stealthily install OpenClaw, a self-hosted autonomous AI agent that has become exceedingly popular in the past … Continue reading Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer Systems
Cybersecurity researchers have disclosed details of a new ClickFix campaign that abuses compromised legitimate sites to deliver a previously undocumented remote access trojan (RAT) called MIMICRAT (aka AstarionRAT).
“The campaign demonstrates a high le… Continue reading ClickFix Campaign Abuses Compromised Sites to Deploy MIMICRAT Malware
With one in three cyber-attacks now involving compromised employee accounts, insurers and regulators are placing far greater emphasis on identity posture when assessing cyber risk.
For many organizations, however, these assessments remain largely… Continue reading Identity Cyber Scores: The New Metric Shaping Cyber Insurance in 2026
A 29-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for his role in facilitating North Korea’s fraudulent information technology (IT) worker scheme.
In November 2025, Oleksandr “Alexander” Didenko pleaded guilty to w… Continue reading Ukrainian National Sentenced to 5 Years in North Korea IT Worker Fraud Case
The U.S. Federal Bureau of Investigation (FBI) has warned of an increase in ATM jackpotting incidents across the country, leading to losses of more than $20 million in 2025.
The agency said 1,900 ATM jackpotting incidents have been reported since 2020,… Continue reading FBI Reports 1,900 ATM Jackpotting Incidents Since 2020, $20M Lost in 2025
Two former Google engineers and one of their husbands have been indicted in the U.S. for allegedly committing trade secret theft from the search giant and other tech firms and transferring the information to unauthorized locations, including Iran.
Sama… Continue reading Three Former Google Engineers Indicted Over Trade Secret Transfers to Iran
Cybersecurity researchers have discovered what they say is the first Android malware that abuses Gemini, Google’s generative artificial intelligence (AI) chatbot, as part of its execution flow and achieves persistence.
The malware has been codenamed Pr… Continue reading PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence