Tag: Cyber Security
‘Identifying vulnerabilities is no longer enough’: Companies need to focus on fixing exploitable vulnerabilities, not discovering as many as possible, says Checkmarx CEO
Artificial intelligence came at just about the right time, speeding up app and software development as the world started to contend with skills shortages, but it changed the pace so much that security teams have not been able to keep up. Recently, we’ve seen AI being applied across multiple other…
Read More
They might have grown up online — but Gen Z are apparently far less likely to use antivirus, study finds
Just 27% of Gen Z respondents use antivirus software for mobile devices, and are less likely to regularly change passwords 57% of Gen Z spend more time online than offline, Kaspersky finds And only 28% regularly backup important personal data stored on their phones Gen Z has no awareness of…
Read More
It’s not just OpenAI models escaping and running riot — experts show how Claude Cowork can break its bonds and access Mac files
Accomplish AI showed Claude Cowork could escape a VM sandbox via Linux zero‑day CVE‑2026‑46331 Agent accessed host Mac files, risking exfiltration of SSH keys, cloud credentials, and more Anthropic shifted Cowork to default cloud execution; local users must harden configs to mitigate exposure Recent news of a ChatGPT agent escaping…
Read More
This Russian cybercrime campaign can infect a user just by viewing an email
Proofpoint reports Russian TA488 exploited Zimbra zero‑day CVE‑2025‑66376 in espionage campaigns “Half‑click exploit” let attackers compromise systems when victims merely viewed malicious emails Targets included NATO, Ukrainian government, and defense entities; group vanished after Feb 2026 exposure Russian state-sponsored cybercriminals have been abusing a zero-day vulnerability in the Zimbra email…
Read More
Experts claim to have found more weaknesses in Apple’s Gatekeeper tool — but it doesn’t seem too bothered
Researchers show Gatekeeper can be bypassed by replacing a previously run legitimate macOS app with malware Attack requires prior user‑level code execution, then swaps in a malicious app that Gatekeeper won’t re‑verify Apple dismissed the issue, saying locally rebuilt bundles fall outside Gatekeeper’s scope, leaving risk to social engineering A…
Read More
Iran-linked group caught hiding surveillance tools in fake apps
Recorded Future found an Iran-linked group spreading spyware The malware is delivered through fake VPN and media player apps Researchers assess that most targets are Iranian users A new report from Recorded Future’s Insikt Group describes a campaign that inverts the whole point of a privacy tool: fake VPN apps…
Read More