News
Ransomware Payments Decline 8% as Attacks Surge 50%
1+ mon, 2+ week ago (427+ words) Ransomware actors are extorting bigger payments from a smaller number of victims, as the number of those victims surges but overall revenues fall, according to Chainalysis. The blockchain analytics firm revealed in its analysis of cryptocurrency payments to threat actors…...
Automotive Ransomware Attacks Double in a Year
2+ day, 13+ hour ago (332+ words) Ransomware is now the fastest growing and most disruptive cyber threat facing the automotive sector, accounting for 44% of attacks on carmakers in 2025, according to Halcyon. The security vendor crunched data from multiple sources to compile a new report on the…...
AI Security Institute Advocates Security Best Practices After Mythos T
4+ day, 17+ hour ago (513+ words) The AI Security Institute (AISI) has urged organizations to double down on "cybersecurity basics" and consider harnessing AI to protect systems after testing Anthropic's latest model. Claude Mythos Preview garnered plenty of press attention last week when the model maker…...
CDW's Walt Powell on Translating Cyber Risk into Business Value
2+ day, 9+ hour ago (1841+ words) The cybersecurity field today is very different from Walt Powell's teenage years, when he dropped out of college to tour with his rock band before starting a cybersecurity career without any higher education qualifications. Now the lead field CISO of…...
AI Drives Doubling of Phishing Attacks in a Year
2+ mon, 2+ week ago (403+ words) Security filters caught one phishing email every 19 seconds in 2025, more than double the rate a year previously, Cofense has revealed. AI technology is helping threat actors to increase the speed and scale of attacks, to the point where detected phishing…...
Open AI Expands Bug Bounty to Cover AI Abuse and 'Safety' Concerns
3+ week, 3+ day ago (292+ words) Open AI has launched a new bug bounty program to engage researchers in addressing AI abuse and safety risks across its products. The new Safety Bug Bounty program was announced on March 26 and is hosted on Bugcrowd. It complements the…...
Russian Cyber Threat Actor Uses Gen AI to Compromise Fortinet Firewalls
1+ mon, 3+ week ago (393+ words) A low-skilled cyber threat actor has been observed leveraging several generative AI (Gen AI) tools to deploy a malicious campaign aimed at compromising Fortinet's Forti Gate firewall appliances. In an Amazon Web Services (AWS) Security blog published on February 20, CJ…...
Systemic Flaw in MCP Protocol Could Expose 150 Million Downloads
2+ day, 23+ hour ago (456+ words) Security researchers have warned of a "critical, systemic" vulnerability in the model context protocol (MCP) which could have a significant impact on the AI supply chain. MCP is a popular open source standard created by Anthropic which allows AI models…...
NVD Revamps Operations as Vulnerability Reporting Surges
1+ year, 1+ week ago (1484+ words) After a tumultuous year marked by internal turmoil and a mounting vulnerability backlog, the National Vulnerability Database (NVD) team within the US National Institute of Standards and Technology (NIST) has finally stabilized. However, the NVD is now facing a new…...
Critical Nginx-ui MCP Flaw Actively Exploited in the Wild
3+ day, 8+ hour ago (376+ words) A critical authentication bypass in nginx-ui, a widely used open-source web interface for managing nginx servers, has been actively exploited in the wild. The vulnerability, tracked as CVE-2026-33032 with a CVSS score of 9. 8, was discovered by Pluto Security and allows…...