Aggregator

Qilin, Akira and Dragonforce were responsible for 40% of 672 ransomware incidents reported in March, says Check Point

Modern authentication solutions help businesses prevent fraud, reduce login friction, and improve user experience. Learn key use cases, benefits, and how passwordless, OTP, and user verification systems enhance security.

The post Authentication Solutions for Businesses: Benefits, Use Cases, and More appeared first on Security Boulevard.

A financially motivated threat actor tracked as Storm-2755 is stealing Canadian employees' salary payments after hijacking their accounts in payroll pirate attacks. [...]

How modern age-verification laws, like the California Digital Age Assurance Act, dismantle the principle of data minimization by mandating the collection of sensitive personal data, effectively turning "don't know" into "must know" and knowledge into liability.

The post When Privacy Laws Force You to Know Too Much: The Perverse Incentives of Age Verification Regimes appeared first on Security Boulevard.

I spent most of one day this week trying to access a perfectly ordinary online service and felt like I was applying for witness protection. By the end of it, I’d supplied a password, a code, a backup code, a second email, and what felt like several pieces of emotional verification. We are constantly told … Continue reading Breach of Confidence: 10 April 2026 →

The post Breach of Confidence: 10 April 2026 appeared first on Security Boulevard.

A financially motivated hacking group is targeting Canadian employees with a sophisticated campaign designed to covertly redirect their salary payments into attacker-controlled bank accounts, Microsoft researchers discovered. SEO poisoning and malvertising + phishing + AiTM The group, which Microsoft tracks as Storm-2755, begins by poisoning search engine results and running malicious ads against generic queries like “Office 365”, or even common misspellings like “Office 265.” Victims who click through land on a convincing but fake … More →

The post Poisoned “Office 365” search results lead to stolen paychecks appeared first on Help Net Security.

LucidRook is Lua malware used in phishing attacks on NGOs and universities in Taiwan, linked to UAT-10362, spread via password-protected emails. LucidRook is a new Lua-based malware used in targeted phishing attacks against NGOs and universities in Taiwan. Cisco Talos links it to a skilled group tracked as UAT-10362. In Oct 2025, attackers used password-protected […]

银狐木马再升级：白嫖正规远控工具，安全软件频频“翻车”

360漏洞挖掘智能体完成Adobe Reader在野0day漏洞根因分析与复现

Chrome’s Device Bound Session Credentials is designed to block infostealers from harvesting session cookie

Currently trending CVE - Hype Score: 7 - ESPv2 is a service proxy that provides API management capabilities using Google Service Infrastructure. ESPv2 2.20.0 through 2.42.0 contains an authentication bypass vulnerability. API clients can craft a malicious `X-HTTP-Method-Override` header value to bypass JWT ...

Currently trending CVE - Hype Score: 3 - A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service. This vulnerability is due to improper handling of malicious HTTP requests to the affected ...

DeepFake-личности, защита крипты после ФЗ-38 и активные атаки на злоумышленников: что нужно знать уже сейчас

2026年3月全国受理网络违法和不良信息举报1728.4万件

国家通报中心监测发现，近期集中爆发多起供应链投毒攻击事件，攻击目标包括API研发工具Apifox、Python开发库LiteLLM以及JavaScript HTTP库Axios，涉及开源软件仓库和商用工具两大核心供应链场景。

为落实数据产权制度、构建全国统一的数据产权登记体系，《数据产权登记工作指引（试行）》聚焦实践需求，为数据产权登记工作开展提供了清晰路径。

近日，国家信息安全漏洞库（CNNVD）收到关于Apache ActiveMQ安全漏洞（CNNVD-202604-1392、CVE-2026-34197）情况的报送。

在大模型时代，具身智能正面临智能范式重塑与物理边界急剧扩张的双重挑战。在多模态大模型能力持续提升的背景下，具身智能系统的落地应用既催生了跨域攻击、多模态越狱攻击等新型安全风险，也推动了学术与产业界构建防范新型风险的全链路安全防御体系。

关键词漏洞据科技媒体 Bleeping Computer 昨天报道，安全研究员 Haifei Li 最近发现，