Cybercrime

Security leaders must prepare for likely threats, not sensationalized agentic attacks

AI attacks may sound scary, but security teams should focus less on hype and more on the vulnerabilities attackers are most likely to exploit.

FBI investigates breach of 153 million driving license records at IDscan.net

A treasure trove of personal data is revealed to the world.

The democratization of cyber warfare — and what it means for CISOs

AI is giving more attackers more power, faster, so defenders need to rethink how they use AI to keep pace.

Counterfeit installers turn routine software downloads into enterprise breaches

Attackers are using spoofed websites impersonating Microsoft Edge, Kaspersky, Razer and other vendors to distribute trojanized installers that establish persistence and weaken security defenses.

Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities

When the patch tsunami meets the maintenance window

AI can find flaws in hours, but factories can’t patch that fast, so OT teams need smarter ways to manage the growing gap.

How China industrialized the infrastructure behind state hacking

The FBI’s takedown of QTFY exposes how China’s reliance on private cyber contractors gives state hackers scale and stealth. It also underscores why CISOs can no longer trust IP reputation alone.

Fake Cloudflare CAPTCHA tricks victims into opening a tunnel for attackers

TerminalFix tricks victims into running malicious PowerShell commands, launching a multi-stage attack that ends with a reverse tunnel into the compromised network.

China-linked hackers turn Cisco routers into covert attack infrastructure

Fire Ant’s compromise of TACACS servers and manipulation of router telemetry shows how control of core network systems can leave defenders with incomplete evidence while exposing paths toward sensitive connected networks.

OpenAI-led coalition warns AI will compress cyberattack timelines, expose enterprise weaknesses

More than 100 firms, including rivals, say enterprises must fix systemic gaps before AI scales exploitation beyond current defenses.