Enterprise Security Tech

U.S. federal authorities are raising alarms about a surge in state-linked cyber activity targeting widely used messaging platforms, signaling a shift in how nation-state actors bypass encryption by exploiting users instead of software vulnerabilities. In two coordinated advisories , the FBI detailed separate campaigns tied to Russian intelligence services and Iran’s Ministry of Intelligence and Security. Both operations rely heavily on social engineering and the abuse of trus

Federal cybersecurity officials are raising alarms over a growing wave of attacks targeting endpoint management systems across U.S. organizations, following a high-profile breach involving medical technology firm Stryker earlier this month. The Cybersecurity and Infrastructure Security Agency (CISA) confirmed it is actively tracking malicious activity that abuses legitimate endpoint management tools to gain control over enterprise environments. The advisory comes as investig

A widely used open source security tool at the center of modern software pipelines has been compromised again, raising new concerns about how attackers are targeting the software supply chain to access sensitive developer infrastructure. Trivy , the vulnerability scanner maintained by Aqua Security, was recently exploited to distribute malware through its official GitHub Actions integrations. The incident marks the second breach involving the project in less than a month, sig

A new cyber threat landscape is emerging alongside escalating geopolitical tensions in the Middle East, with security researchers warning that the region’s instability is increasingly mirrored in cyberspace. A recent update from NCC Group highlights a growing convergence between physical conflict and coordinated cyber activity, signaling a shift toward more persistent and strategically aligned digital operations. The report points to a steady rise in cyber campaigns linked t

Cybersecurity researchers are warning that generative AI is beginning to reshape how ransomware operations are developed and executed. A recently discovered malware strain known as Slopoly has been linked to an Interlock ransomware attack, highlighting how attackers are increasingly using AI-assisted tooling to infiltrate enterprise systems and remain undetected for extended periods. Investigators say the malware played a key role in maintaining unauthorized access to a comp

A cyberattack that crippled systems at medical device manufacturer Stryker has triggered concern among cybersecurity researchers and policymakers, raising new questions about how geopolitical tensions are spilling into corporate networks. The incident came to light after employees across multiple regions reported that company-issued laptops, phones, and computers had suddenly been wiped of data. Workers in the United States, Ireland, Australia, and India were locked out of c