Enterprise Security Tech

In a move that underscores the tension between national security and operational cybersecurity, the Federal Communications Commission has extended temporary waivers allowing certain foreign-made routers and drones already deployed in the United States to continue receiving critical software and firmware updates through January 1, 2029. The decision reverses an earlier trajectory that would have cut off updates by 2027 for devices placed on the agency’s “Covered List,” a desig

A growing wave of AI-powered scams is reshaping how Americans interact with one of the most basic forms of communication: the phone call. New research from Truecaller suggests the threat has reached a tipping point, where fear of fraud is now actively disrupting everyday life and business operations. According to the company’s 2026 Phone Fraud and AI Threat Survey, scam activity has evolved from a persistent annoyance into a systemic trust breakdown. The data shows that a maj

A security incident at Vercel is highlighting a dangerous shift in how attackers are breaching modern cloud environments. The company confirmed that hackers accessed internal systems and customer data after exploiting a compromised third-party AI integration, reinforcing warnings that identity-based attacks are now outpacing traditional infrastructure exploits. The breach originated from Context AI, whose application was connected to a Vercel employee’s corporate Google accou

A brief but high-impact compromise of CPUID’s official website has exposed a growing weakness in the modern software supply chain. For less than 24 hours, attackers hijacked download links for widely used system utilities, replacing legitimate installers with malware-laced packages designed to silently establish remote access on victim machines. The incident, which unfolded between April 9 and April 10, targeted users attempting to download tools such as CPU-Z and HWMonitor.

A newly observed macOS malware campaign is signaling a tactical shift in how attackers deliver infostealers, quietly abandoning the Terminal in favor of a less scrutinized native tool. Researchers at Jamf Threat Labs have identified a variant of the widely used ClickFix social engineering technique that leverages Script Editor, opening a new path to execute malicious code while sidestepping recent Apple protections. A Familiar Trick, Rewired for macOS ClickFix campaigns have

Federal cybersecurity agencies are warning that Iran-affiliated hackers are actively exploiting weaknesses in the industrial control systems that underpin America’s water and energy infrastructure, signaling a renewed focus on operational disruption rather than simple espionage. In a joint advisory released , a coalition that includes the Cybersecurity and Infrastructure Security Agency, National Security Agency, Federal Bureau of Investigation, U.S. Cyber Command, Department