Enterprise Security Tech

A pair of security flaws in Shynet, the self-hosted web analytics platform used by developers and privacy-conscious website owners, shows how even lightweight tracking software can become a powerful attack surface when it sits inside the browser flow of multiple sites. Security researchers at Bishop Fox disclosed two vulnerabilities in Shynet version 0.13.1 that could allow unauthenticated attackers to compromise tracked websites or hijack user accounts. The most serious issu

Token has appointed veteran cybersecurity executive Torrell Funderburk to its Industry Advisory Board, strengthening the company’s CISO bench as enterprises confront a new identity crisis created by AI agents, deepfakes, and credential-based attacks. Funderburk is a two-time Top Global CISO who has led enterprise security at Sealed Air, a Fortune 500 company, and Maestro Health, an AXA subsidiary. His appointment gives Token another practitioner voice at a moment when identit

U.S. manufacturers are moving fast into Industry 4.0, but the cyber risk is moving with them. A new report from Integris finds that manufacturers are rapidly adopting cloud infrastructure, AI, robotics, automation, and smart factory systems, even as many report serious security incidents across email, mobile devices, cloud environments, and databases. The findings suggest that the next phase of manufacturing competition will not be defined only by who can automate the fastest

The White House’s new executive order on quantum innovation is putting fresh pressure on federal agencies and enterprises to prepare for a future where today’s encryption may no longer be safe. Signed June 22, the order directs the federal government to update the National Quantum Strategy, accelerate quantum computing, sensing and networking programs, strengthen domestic quantum supply chains, expand the quantum workforce and improve protections around quantum technologies.

A DragonForce ransomware attack has exposed a new problem for enterprise defenders: attackers are no longer just hiding behind disposable servers and shady domains. They are increasingly blending into the trusted cloud services companies rely on every day. Broadcom’s Symantec and Carbon Black threat hunters say they found a new Go-based backdoor, tracked as Backdoor.Turn, during an investigation into an attack on a U.S. services company. The malware is notable because it rout

Eastman Kodak has confirmed it is investigating a data breach after the ShinyHunters extortion group claimed it stole more than 2.2 million records containing customer personally identifiable information and internal corporate data. Kodak said an unauthorized third party briefly accessed a limited amount of company data and that outside cybersecurity experts are helping determine what was accessed and copied. The company said it is working with law enforcement and does not be