Archive
(2,175 Total Articles)Page 10 of 15.
Microsoft is adding more oversight around agentic AI and publishing those controls in its transparency reporting. For defenders, the main impact is in governance and compliance: it signals tighter expectations for how AI systems are evaluated, monitored, and documented before and after release.
KnowBe4 is adding an email security product for Google Workspace, which puts it squarely in the market for protecting cloud email and user accounts. For defenders, the main change is another vendor control to evaluate for coverage, integration, and overlap with existing Google Workspace security tools.
Cognizant is deepening its use of CrowdStrike to secure operations that span both IT and OT environments. For defenders, this points to tighter convergence of endpoint and industrial monitoring, with more emphasis on protecting critical infrastructure from disruptions that move across corporate and operational networks.
ITCEN Group is launching a product aimed at securing enterprise AI use in South Korea. For defenders, this points to growing demand for controls around AI systems, especially where organizations are trying to manage exposure from enterprise deployment rather than just block consumer use.
This is a conference announcement, not a report of a new incident or regulatory action. For defenders, it mainly signals a regional venue where government, industry and security leaders may discuss current risks, policy priorities and coordination.
The piece is an opinion essay about who is responsible for protecting Pakistan’s digital environment. For defenders, the issue is governance and accountability: it points to a need to clarify which institutions own cybersecurity, critical-infrastructure protection, and day-to-day incident response.
Vietnam appears to be setting a higher mandatory cybersecurity spending floor for organizations under a new 2026 budget law. For defenders, that shifts cybersecurity from discretionary spend toward a compliance obligation, with the main impact on budget planning, audit readiness, and baseline control coverage.
A Mumbai bank is reported to have been hit by a cyberattack involving an employee email account and alleged theft of confidential customer data. For defenders, the immediate issues are email compromise, possible unauthorized access to sensitive financial records, and the need to confirm scope, containment, and notification obligations.
North Korean-linked hackers are targeting crypto and other digital asset holdings, which raises the risk of theft, laundering and broader financial disruption for exchanges, custodians and investors. Defenders should treat this as an adversary that blends cyber intrusion with financial crime and review controls around wallet security, transaction monitoring and third-party access.
Australian and US law enforcement say they disrupted a cross-border cybercrime network tied to crypto laundering. For defenders, the main issue is enforcement pressure on criminal infrastructure and the need to watch for laundering links that can connect fraud, identity abuse, and other cyber incidents.
Ontology has paused its blockchain after identifying a potential security vulnerability. For defenders, this is a reminder that blockchain platforms can still face operational risk from exposed weaknesses, and incident response plans should account for service interruption as well as exploitation.
Security leaders need to treat privileged access as a control point, not just an administrative convenience. The piece appears to focus on how defenders should tighten who can use high-level accounts, since misuse of privileged credentials is a common path to broader compromise.
India has issued a cyber fraud warning tied to porn app scams that use malicious APKs to infect phones and drain bank accounts. For defenders, the priority is user education, mobile app vetting, malware detection, and controls that reduce the impact of device compromise on financial accounts.
India’s digitising critical sectors are widening the attack surface beyond the traditional focus on banks and healthcare. For defenders, that raises the need to prioritise sector-wide resilience, not just standalone enterprise security, across critical infrastructure and OT environments.
Chinese Fire Ant is abusing Cisco routers as covert infrastructure for surveillance. For defenders, the exposure is network edge devices that may sit outside normal endpoint monitoring, so the priority is to harden, patch, and audit router management and logging controls.
A large set of Alipay user data is being offered for sale, which points to a potential exposure of sensitive financial and identity information. Defenders should treat this as a data-breach and fraud risk, with likely follow-on abuse such as account takeover, phishing, and identity theft.
Android users are being targeted through fake pornography-themed apps promoted on major social platforms. For defenders, this raises the risk of mobile malware delivery, account abuse, and social engineering that can bypass traditional perimeter controls, with a clear obligation to tighten mobile app monitoring and user awareness.
ValleyRAT is being distributed under the cover of adware, which means defenders should treat a seemingly low-risk installer or bundle as a potential malware delivery path. The immediate concern is endpoint exposure and detection, especially where users can run unsigned or bundled software without strong controls.
The piece appears to describe how cyber-physical systems are shaping India’s technology landscape. For defenders, that points to a broader attack surface where IT and operational technology are more closely linked, so security teams need to pay attention to resilience, segmentation, and operational risk as digital systems spread into physical processes.
Indonesia has issued implementing rules for its Personal Data Protection Law, which means organizations operating in the country now have a clearer compliance baseline. For defenders and compliance teams, the main impact is on governance, data-handling controls, and local legal obligations rather than on a new technical threat.
This is a list-style piece about cybersecurity startups in China. For defenders, it is mainly a market watch item: it can help identify where new security tooling and investment are emerging, but it does not describe a specific vulnerability, incident, or policy change.
29CM appears to have exposed personal records that include names, contact details, and delivery addresses. For defenders, this is a data-breach event that increases exposure to phishing, account takeover attempts, and downstream privacy and compliance obligations.
The story points to a cyber campaign tied to an India-focused military operation and suggests activity aimed at government websites and public online channels. For defenders, the immediate concern is exposure of public-sector and critical-infrastructure services to politically driven probing, coordination, and influence via social platforms, which raises priority for monitoring, hardening, and incident response across government environments.
GS Retail is responding to a data breach by apologizing publicly and promising to harden its security controls. For defenders, the main issues are breach response, customer-data exposure, and the regulatory consequences that follow when a retailer loses control of sensitive information.
A China-linked intrusion set is said to be abusing Cisco routers to collect credentials and suppress security logging. For defenders, that raises the priority of router hardening, credential protection, and log integrity because the attack targets both access and visibility.