AI agents at work, old attacks in overdrive
Hey there! AI has really made its mark in the daily operations of small and mid-size businesses (SMBs). It’s not just about chatbots anymore – businesses are now entrusting tasks […]
The browser is where attacks land. Why is security still focused on the endpoint?
Presented by CloudMosa Hey there, enterprise professionals! Did you know that work is increasingly happening inside the browser? It’s true! And with this shift comes a rise in browser-based cyberattacks. […]
Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren't covering
Recently, there have been four supply-chain incidents affecting OpenAI, Anthropic, and Meta within a span of 50 days. These incidents included three adversary-driven attacks and one self-inflicted packaging failure. Interestingly, […]
Browser-based attacks hit 95% of enterprises — and traditional security tools never saw them coming
Are Your Security Tools Missing Browser-Based Attacks? Did you know that your web gateway, cloud access broker, and endpoint protection may not be able to detect browser-based attacks? Shockingly, 95% […]
2026 Study from Panorays: 85% of CISOs Can’t See Third-Party Threats Amid Increasing Supply Chain Attacks – Latest Hacking News
6.5K New York, NY, January 14th, 2026, CyberNewsWire Panorays, a leading provider of third-party security risk management software, has released the 2026 edition of its annual CISO Survey for Third-Party […]
The 11 runtime attacks breaking AI security — and how CISOs are stopping them
Are you aware that enterprise security teams are facing a new challenge with AI-enabled attacks? The threat model has shifted, and traditional security measures are no longer sufficient to combat […]
How whaling attacks target top executives
Is your organization’s senior leadership vulnerable to a cyber-harpooning? Learn how to keep them safe. 09 Dec 2025 • , 5 min. read Hey there! Have you heard about the […]
AI models block 87% of single attacks, but just 8% when attackers persist
A single malicious prompt is blocked while ten prompts manage to get through. This difference between passing benchmarks and facing real-world attacks is crucial for enterprises to understand. When attackers […]
PlushDaemon compromises network devices for adversary-in-the-middle attacks
ESET researchers provide insights into how PlushDaemon conducts adversary-in-the-middle attacks using a previously undocumented network implant known as EdgeStepper. This implant redirects all DNS queries to a malicious hijacking node, […]
The who, where, and how of APT attacks in Q2 2025–Q3 2025
Hey there cyber-savvy folks, Did you catch the latest scoop from the ESET research team? They just dropped the newest issue of the APT Activity Report, giving us a deep […]