In the wake of the Amazon Web Services (AWS) outage earlier this week, there have been numerous articles published in the media concerning just how vulnerable our society has become to just a few Big ...

A foreign actor infiltrated the National Nuclear Security Administration’s Kansas City National Security Campus through vulnerabilities in Microsoft’s SharePoint browser-based app, raising questions a...

ConnectWise released a security update to address vulnerabilities, one of them with critical severity, in Automate product that could expose sensitive communications to interception and modification. [...]

Inside the Salesloft-Drift Breach: What It Means for SaaS & Identity SecurityIn this session, Permiso’s CTO will cover:- How attackers moved from GitHub → AWS → Salesforce using stolen OAuth to…

Representative image (AI) China on Sunday accused the US National Security Agency (NSA) of carrying out cyberattacks on its National Time Service Center. It further warned that any damage to the facility could disrupt network communications, financial systems and power supply.The Ministry of State Security said in a WeChat post that the US agency exploited vulnerabilities in the messaging services of a foreign mobile phone brand in 2022 to steal sensitive information from devices used by the center’s staff.

Disclaimer: This post reflects my personal perspective as I begin my new role at Unit 42. The views expressed here […]

Author, Creator & Presenter: Dr. Kathleen Fisher PhD, Director, Information Innovation Office (I2O), US Defense Advanced Research Projects Agency (DARPA) Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the organization’s’ YouTube channel.

Despite daunting technical challenges, a quantum computer capable of breaking public-key encryption systems may only be a decade or two off.

Rolling out Purview doesn’t have to feel like a maze. Microsoft has packaged its guidance into short, scenario driven “deployment […]

A massive NPM supply chain attack has compromised foundational packages like Chalk, affecting over 1 billion weekly downloads. We dissect the crypto-stealing malware and show you how to protect your p...

Unify SecOps with Sentinel Data Lake and Defender XDR. Learn RBAC hardening, onboarding, incident correlation, Purview audit logging, and cost aware retention.

APT28 deploys NotDoor Outlook backdoor via OneDrive DLL side-loading, enabling email-based data theft in NATO firms.

GPT-5:n epäonnistunut lanseeraus on herättänyt taas keskustelua kielimallien kehityksen hidastumisesta. Helsingin yliopiston tietojenkäsittelyprofessori Hannu Toivonen kertoo, että kielimallit eivät voi kehittyä loputtomiin.

Researchers bypass GPT-5 guardrails using narrative jailbreaks, exposing AI agents to zero-click data theft risks.

Designed to classify software without context, Project Ire replicates the gold standard in malware analysis through reverse engineering. It streamlines a complex, expert-driven process, making large-s...

Learn how to turn insider risk detection into consistent, scalable action by automating workflows with Microsoft Purview risk policies, adaptive protection, and Power Automate - complete with playbook...

I am pleased to publish, that I have been nominated as a Microsoft Security MVP in August, 2025. This milestone […]

: Under oath in French Senate, exec says it would be compelled – however unlikely – to pass local customer info to US admin