Enterprise Security Tech

Fraudulent job candidates are slipping through remote hiring systems and gaining legitimate access to corporate networks, exposing a growing identity security gap that conventional screening tools are failing to close. New research from HYPR found that 98% of surveyed HR executives have encountered candidate fraud. Yet 68% of fraudulent hires were ultimately exposed through human observation or intuition, rather than automated security controls. The findings suggest generativ

DrayTek is partnering with Enea to bring deeper application intelligence and threat detection to its next generation of high-performance networking and cybersecurity platforms. The collaboration will integrate Enea’s Qosmos technology into upcoming DrayTek products, giving security teams greater visibility into the applications, services, and traffic moving across business networks. DrayTek plans to embed Enea Qosmos ixEngine, a deep packet inspection and traffic classificati

A new phishing campaign is exploiting Microsoft’s device authentication process to hijack accounts, giving attackers a way to bypass traditional multifactor authentication protections. Researchers at eSentire have named the phishing kit “GhostCode.” The campaign begins when attackers submit messages through corporate website contact forms while impersonating procurement representatives from legitimate organizations. These messages are designed to establish trust and steer emp

Hundreds of agents linked to OpenAI reportedly uploaded malicious packages to RubyGems, achieved remote code execution and attempted to obtain user API keys, exposing the unpredictable risks of autonomous AI security testing. OpenAI confirmed that its agents interacted with RubyGems but described the activity as benign. RubyGems researchers offered a more troubling account, reporting that some agents attempted to conceal malicious payloads after exploiting a documentation bui

A Security has released ARENA, an open source framework designed to measure what autonomous AI agents can accomplish during offensive cybersecurity operations. Available under the MIT license, ARENA combines a security capability framework, vulnerable application generator, and evaluation system. Its goal is to help organizations compare complete AI security platforms instead of relying on model rankings or vendor-reported results. The release follows Booz Allen’s Cyber Weapo

Meta’s $18 billion settlement with 48 U.S. states could force social media platforms to rethink how they identify underage users without turning age verification into another source of privacy risk. The agreement resolves allegations that Facebook and Instagram harmed young users and violated children’s privacy protections. Beyond its record financial cost, the settlement requires Meta to introduce an age assurance framework with specific accuracy, testing and privacy standar