How shadow IT leaves every industry in the dark

Shadow IT is everywhere. What began with employees or departments bringing familiar tools such as personal…

Anthropic’s AI used in automated attacks

Anthropic reported that a group of what it believes to be Chinese hackers carried out a…

Bundestag beschließt NIS2-Umsetzung

Kritik von Experten Der Bitkom hält von der kurzfristig in das Gesetzgebungsverfahren eingebrachten Neuregelung zu „kritischen…

Copy-paste vulnerability hits AI inference frameworks at Meta, Nvidia, and Microsoft

Why this matters for AI infrastructure The vulnerable inference servers form the backbone of many enterprise-grade…

Fighting AI with AI: Adversarial bots vs. autonomous threat hunters

I recently gave a presentation at SecTor on proactive threat hunting, which sparked some meaty conversations…

North Korea’s ‘Job Test’ trap upgrades to JSON malware dropboxes

The final payload (BeaverTail) showed previously seen capabilities, including “usage of Axioms as embedded HTTP client,…

EU-Kommission will DSGVO für KI und Cookie-Tracking lockern

Schutz sensibler Daten eingeschränkt Eine weitere umstrittene Änderung des Vorschlags wäre die Einschränkung der Definition sensibler…

Maverick: a new banking trojan abusing WhatsApp in a massive scale distribution

A malware campaign was recently detected in Brazil, distributing a malicious LNK file using WhatsApp. It…

Hidden links: why your website traffic is declining

When analyzing the content of websites in an attempt to determine what category it belongs to,…

Malicious package with AdaptixC2 framework agent found in npm registry

Incident description The first version of the AdaptixC2 post-exploitation framework, which can be considered an alternative…