Latest security news

The West African nation launched financing, procurement, and infrastructure policies to boost its sovereign cloud initiative and increase domestic technical knowledge.

ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands

As frontier AI models become increasingly restrictive, security teams are facing a "safety penalty" that hampers real-time incident response. Discover how organizations can move toward operational sovereignty to ensure their defensive AI keeps pace with unconstrained adversaries.

TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements

NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions

Every time you add an extension or plugin to your browser, there's a risk that you might be doing more than managing your cryptocurrency wallet, generating passwords, taking notes, or tracking sports results. There's a chance that you have just handed a complete stranger access to your savings. Read more in my article on the Hot for Security blog.

Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens

In this week's newsletter, new author Mick Baccio introduces himself and explores the operational and security implications of the new White House memorandum regarding private sector participation in government-authorized offensive cyber operations.