Enterprise Security Tech

This guest article was contributed by Devin Magure, Senior Manager, Product Marketing, Cycode A quick glance at the cybersecurity headlines suggests that the world continues to face a range of serious risks. High-profile breaches, attacks on financial institutions, cyber operations with geopolitical implications and newly discovered software vulnerabilities are all familiar themes for security leaders. Interestingly, these were also the kinds of stories making headlines in 20

Chainguard says its Athena coalition has processed more than 40,000 open source vulnerability findings in three weeks, highlighting how AI is changing the speed and scale of software security. Chainguard is expanding Athena, its industry coalition for coordinated open source software defense, as the cybersecurity world races to adapt to a new vulnerability landscape shaped by frontier AI models, automated exploit discovery, and increasingly compressed response windows. The Ki

A cyberattack on an email platform operated by Japanese telecom giant KDDI exposed more than 12.2 million customer email addresses and 7.6 million passwords, marking one of the larger recent credential exposure incidents tied to shared internet service provider infrastructure in Japan. KDDI said the breach affected an email system it runs for five Japanese internet service providers. The platform supports customer email account management, webmail access and email storage. Th

A previously unknown espionage group believed to be operating on behalf of China is targeting physics and engineering departments at universities in the United States and Canada, with a particular focus on research tied to national security, astrophysics, and particle physics. Security researchers at Proofpoint are tracking the activity as UNK_MassTraction. The group is exploiting a chain of vulnerabilities in Roundcube, a widely used open-source webmail platform, to steal cr

A logistics-themed phishing campaign recently pushed the CrySome remote access trojan through a multi-stage Windows infection chain, showing how attackers are blending believable business lures, native system tools, open-source security-disabling utilities, and modular malware to gain persistent control of victim machines. Researchers with LevelBlue’s SpiderLabs said the incident began with a targeted spear-phishing email disguised as a freight rate confirmation. The message