Movatterモバイル変換

Feb 12, 20264 mins

MalwarePhishingSecurity

News

More security news

Artificial IntelligenceCyberattacksCybercrime

Cyber attacks enabled by basic failings, Palo Alto analysis finds

Time to exploit drops to 72 minutes as AI automation accelerates cyberattacks.

By John E. Dunn

Feb 17, 20264 mins

ZeroDayRAT spyware targets Android and iOS devices via commercial toolkit

Researchers said the openly available spyware enables surveillance, credential theft, and financial targeting across a wide range of mobile OS versions.

Endpoint ProtectionMobile SecuritySecurity

Feb 17, 20264 mins

Data and Information SecurityGenerative AIIT Governance

Why 2025’s agentic AI boom is a CISO’s worst nightmare

AI agents may work smarter than chatbots, but with tool access and memory, they can also leak data, loop endlessly or act maliciously.

By Sunil Gentyala

Feb 17, 202610 mins

Browser SecurityEndpoint ProtectionZero-Day Vulnerabilities

Exploit available for new Chrome zero-day vulnerability, says Google

Use after free memory hole lets a remote attacker execute code inside a sandbox.

By Howard Solomon

Feb 16, 20264 mins

Artificial IntelligenceOpen SourceRisk Management

Open source maintainers being targeted by AI agent as part of ‘reputation farming’

AI agent OSS activity opens the door to future supply chain attacks, says security company.

By John E. Dunn

Feb 16, 20264 mins

Leaky Chrome extensions with 37M installs caught divulging your browsing history

Hundreds of popular add‑ons used encrypted, URL‑sized payloads to send search queries, referrers, and timestamps to outside servers, in some cases tied to data brokers and unknown operators.

Browser SecurityEndpoint ProtectionSecurity

Feb 16, 20263 mins

By Maman Ibrahim and Gavriel Schneider

Finding a common language around risk

Siloed cyber, operations and strategy teams undermine risk management; unified culture and governance turn fragmented risk into resilience.

Feb 16, 202610 mins

IT LeadershipRisk ManagementSecurity Practices

CyberattacksCybercrimeData Breach

South Korea fines Louis Vuitton, Christian Dior, Tiffany $25M for SaaS security failures

Vishing involved in two of three breaches against Korean subsidiaries of prominent luxury brands impacting more than 5 million customers in total.

By 이지현

Feb 13, 20263 mins

Open SourceSecurityVulnerabilities

Researchers unearth 30-year-old vulnerability in libpng library

The widely used open-source library has been patched to defend against a heap buffer overflow flaw that’s been in the code since its inception.

By John Leyden

Feb 13, 20263 mins

APIsCloud SecurityZero-Day Vulnerabilities

Battling bots face off in cybersecurity arena

Wiz creates an environment to test AI agents’ ability to identify cybersecurity problems.

By Maxwell Cooter

Feb 13, 20262 mins

Four new reasons why Windows LNK files cannot be trusted

By putting conflicting metadata in LNK files, a researcher found four new ways to spoof targets, hide arguments, and run unintended programs in Windows Explorer.

Endpoint ProtectionSecurityWindows Security

Feb 13, 20264 mins

CareersIT Skills and TrainingStaff Management

The foundation problem: How a lack of accountability is destroying cybersecurity

The Navy trains 18-year-olds to run nukes, so why can't we train security analysts? The "talent shortage" is actually just a lack of leadership and mentorship.

By Tom Marsland

Feb 13, 202610 mins

Video on demand

video

How Intelligence and AI Are Changing Cyber Defense | Erin Whitmore, Former CIA

What if you could stop cyberattacks before they happen? In this episode of Cyber Sessions, host Joan Goodchild sits down with Erin Whitmore, former CIA case officer and current Head of the CYNTURION Group for CYPFER, to discuss how her team uses intelligence and AI to anticipate and prevent attacks before adversaries strike. Whitmore reveals how proactive cybersecurity is blending human intuition, artificial intelligence, and offensive tactics to predict threats — while balancing the line between privacy and protection.

By Joan Goodchild

Feb 4, 202628 mins

CyberattacksCybercrime

See all videos

Explore a topic

The new era of IT innovation

ArticlesBuyer’s Guide

Emerging technologies from AI and quantum computing to extended reality, edge computing, digital twins, and more are at the forefront of innovation, poised to reshape how companies operate, compete, and deliver value in a rapidly evolving digital landscape. CIOs and their teams find it difficult to keep pace with emerging tech and to understand the provider landscape. This focus enables sponsors to share their strategies and offerings in new areas of keen interest to buyers.

View all

In depth

Feature

Who owns your data? SaaS contract security, privacy red flags

Companies looking to use SaaS solutions should involve the security team in the procurement process and pay attention to contract language.

By Andrada Fiscutean

Mar 27, 202410 mins

Data and Information Security

Read the Article

Podcasts

podcasts

Cyber Sessions with Joan Goodchild

Cybersecurity is constantly evolving, and so are the leaders who shape it. Hosted by veteran journalist Joan Goodchild, Cyber Sessions brings candid conversations with top CISOs, strategists, and industry influencers. Each episode cuts through the noise to explore the trends, challenges, and leadership insights that define the future of security.

6 episodes

SecuritySecurity Practices

Show me more

Access ControlData and Information SecurityEncryption

Why key management becomes the weakest link in a post-quantum and AI-driven security world

By Rakesh Keshava

Feb 13, 20266 mins

brandpostSponsored by Cognizant & Rubrik

Why identity recovery is now central to cyber resilience

By Sriramkumar Kumaresan, Senior Vice President and Global Head of Cloud, Infrastructure and Security, Cognizant

Feb 12, 20264 mins

Security