What Is Attack Surface Management?
Attack surfaces are growing faster than security teams can keep up – to stay ahead, you need to know what’s exposed and where attackers are most likely to strike. With cloud adoption dramatically increasing the…
Apple’s post-iPhone plan is working… so far
How long can Apple keep relying on the iPhone? Nobody knows, because there’s never been another product quite like it. But the plumpest golden goose in history isn’t going to keep laying eggs forever. Apple,…
Crazy Evil Gang Targets Crypto with StealC, AMOS, and Angel Drainer Malware
A Russian-speaking cybercrime gang known as Crazy Evil has been linked to over 10 active social media scams that leverage a wide range of tailored lures to deceive victims and trick them into installing malware…
ChatGPT’s advanced AI costs $200/mo. It’s now free for Windows users
Microsoft is taking an aggressive step towards lowering the price of top-tier AI reasoning, placing what appears to be unlimited access to OpenAI’s o1 model directly within Copilot’s new “Think Deeper” feature. What’s important here…
Senator warns of national security risks after Elon Musk’s DOGE granted ‘full access’ to sensitive Treasury systems
A senior U.S. lawmaker says representatives of Elon Musk were granted “full access” to a U.S. Treasury payments system used to disperse trillions of dollars to Americans each year, and warned that Musk’s access to…
What does a $2500 GPU get you? A look at MSI’s liquid-cooled RTX 5090
If you can afford a $2000 RTX 5090 graphics card — and you can find one — you can probably afford an even more expensive one. So why not go all out, with a liquid-cooled,…
U.S. and Dutch Authorities Dismantle 39 Domains Linked to BEC Fraud Network
Feb 01, 2025Ravie LakshmananCybercrime / Fraud Prevention U.S. and Dutch law enforcement agencies have announced that they have dismantled 39 domains and their associated servers as part of efforts to disrupt a network of online…
BeyondTrust Zero-Day Breach Exposes 17 SaaS Customers via Compromised API Key
Feb 01, 2025Ravie LakshmananVulnerability / Zero-Day BeyondTrust has revealed it completed an investigation into a recent cybersecurity incident that targeted some of the company’s Remote Support SaaS instances by making use of a compromised API…
Meta Confirms Zero-Click WhatsApp Spyware Attack Targeting 90 Journalists, Activists
Feb 01, 2025Ravie LakshmananPrivacy / Surveillance Meta-owned WhatsApp on Friday said it disrupted a campaign that involved the use of spyware to target journalists and civil society members. The campaign, which targeted around 90 members,…
Malvertising Scam Uses Fake Google Ads to Hijack Microsoft Advertising Accounts
Feb 01, 2025Ravie LakshmananMalvertising / Mobile Security Cybersecurity researchers have discovered a malvertising campaign that’s targeting Microsoft advertisers with bogus Google ads that aim to take them to phishing pages that are capable of harvesting…