eCommerceNews US - Technology news for digital commerce decision-makers
United States

Infosec Stories - Page 21

American Stories

Infosec stories

RapidFort & ReversingLabs add security checks to libraries
Application Security

RapidFort & ReversingLabs add security checks to libraries

Enterprises can now vet open-source dependencies before build time, as the catalogue adds independent malware and vulnerability checks for Python and Java.

By Mark Tarre • 4 min read • Last month
Picus launches AI platform to validate real exploits
Firewalls

Picus launches AI platform to validate real exploits

Security teams may be able to cut false alarms as Picus says its new platform proves whether a vulnerability can actually be exploited.

By Sean Mitchell • 4 min read • Last month

Global Stories

Infosec stories

NCC Group maps security gaps across AI coding agents
Application Security

NCC Group maps security gaps across AI coding agents

Weak default safeguards and uneven sandboxing could leave developers exposed to command execution before workspace trust is granted.

By Sean Mitchell • 4 min read • Last month
CISOs warn AI scams widen leadership cyber risk gap
Phishing

CISOs warn AI scams widen leadership cyber risk gap

AI-enabled scams are making it harder for UK and European businesses to win executive backing for staff-focused cyber defences.

By Sofiah Nichole Salivio • 4 min read • Last month
Quorum Cyber revamps AI security services for businesses
Data Protection

Quorum Cyber revamps AI security services for businesses

Businesses are being urged to tighten controls as AI tools spread faster than governance, with Quorum Cyber updating assessments to cut cyber risk.

By Sean Mitchell • 4 min read • Last month
Helix data extortion group linked to BlackFile, ShinyHunters
Software-as-a-Service

Helix data extortion group linked to BlackFile, ShinyHunters

Businesses face a fresh wave of identity theft-driven extortion as Helix is linked to BlackFile and ShinyHunters through shared infrastructure.

By Sean Mitchell • 5 min read • Last month
Conifers opens Singapore data region for Asia-Pacific
Data Protection

Conifers opens Singapore data region for Asia-Pacific

Asia-Pacific security teams can now keep regulated data in Singapore as Conifers expands its CognitiveSOC platform across the region.

By Mark Tarre • 4 min read • Last month
Financial services breach risk rises as AI adoption surges
Malware

Financial services breach risk rises as AI adoption surges

Breaches are hitting lenders harder as AI adoption speeds up, with 98 per cent of affected firms saying the impact was material.

By Sean Mitchell • 4 min read • Last month
BlueVoyant appoints new Chief Financial & Customer Officers
Software-as-a-Service

BlueVoyant appoints new Chief Financial & Customer Officers

The cybersecurity company is tightening financial control and customer support as it expands internationally and seeks to protect recurring revenue.

By Mark Tarre • 4 min read • Last month
Elastic finds AI-assisted banking fraud ring in Mexico
Crypto

Elastic finds AI-assisted banking fraud ring in Mexico

A live fraud campaign targeting Mexican banks, fintechs and crypto services exposed how criminals are using generative AI to draft malware.

By Mark Tarre • 4 min read • Last month
ESET warns of AI abuse & quishing surge in attacks
Malware

ESET warns of AI abuse & quishing surge in attacks

Malicious AI skills are helping criminals steal data and run malware, while QR-code phishing climbed 146% in the latest ESET report.

By Joseph Gabriel Lagonsin • 4 min read • Last month
AI agents emerge as top cyber threat, Exabeam finds
Robotics

AI agents emerge as top cyber threat, Exabeam finds

Security teams now see autonomous AI as a bigger internal danger, even as most say it is boosting productivity, a survey found.

By Mark Tarre • 3 min read • Last month
Summer holidays leave firms more exposed to cyber fraud
Network Security

Summer holidays leave firms more exposed to cyber fraud

Reduced staffing and delegated approvals during annual leave are giving fraudsters more chances to slip through corporate checks, Everywhen says.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Google Cloud links Wiz exposure data with threat intel
Malware

Google Cloud links Wiz exposure data with threat intel

Security teams could cut alert overload as Google ties exposed assets to live attacker activity, helping prioritise the riskiest flaws first.

By Sean Mitchell • 3 min read • Last month
Mandiant finds way to recover active ADFS signing keys
Data Protection

Mandiant finds way to recover active ADFS signing keys

Firms with manually rotated ADFS certificates could still be exposed, as attackers may recover live signing keys and forge SAML logins.

By Mark Tarre • 5 min read • Last month

Stories from Other Regions

Infosec stories

NCC Group backs UK cyber resilience pledge at Downing
Ransomware

NCC Group backs UK cyber resilience pledge at Downing

UK firms face mounting attack costs as NCC Group joins a government-backed push to put cyber risk on board agendas and across supply chains.

By Sean Mitchell • 4 min read • Last month
Public sector cyber training gaps exposed in survey
Data Protection

Public sector cyber training gaps exposed in survey

Staff confidence masks weak cyber readiness in the public sector, where more than a quarter report no effective training in a year or ever.

By Sean Mitchell • 4 min read • Last month