Enterprise Security Tech

The economics of cybercrime are accelerating at a pace that is beginning to outstrip enterprise defenses. According to the FBI’s Internet Crime Complaint Center (IC3) 2025 Annual Report , total reported losses reached $20.88 billion, a 26 percent increase year over year, signaling a structural shift in how cybercriminal operations scale, target, and monetize victims. More than one million complaints were filed in 2025, underscoring the growing frequency of attacks and the wid

A newly observed macOS malware campaign is signaling a tactical shift in how attackers deliver infostealers, quietly abandoning the Terminal in favor of a less scrutinized native tool. Researchers at Jamf Threat Labs have identified a variant of the widely used ClickFix social engineering technique that leverages Script Editor, opening a new path to execute malicious code while sidestepping recent Apple protections. A Familiar Trick, Rewired for macOS ClickFix campaigns have

Federal cybersecurity agencies are warning that Iran-affiliated hackers are actively exploiting weaknesses in the industrial control systems that underpin America’s water and energy infrastructure, signaling a renewed focus on operational disruption rather than simple espionage. In a joint advisory released , a coalition that includes the Cybersecurity and Infrastructure Security Agency, National Security Agency, Federal Bureau of Investigation, U.S. Cyber Command, Department

A new cybersecurity report from Lumen signals a fundamental shift in how cyberattacks are built, scaled, and executed. The findings suggest that by the time most organizations detect an intrusion, the real operation has already been underway for days or even weeks. According to the Lumen Defender Threatscape Report 2026 , attackers are no longer focused solely on breaching endpoints. Instead, they are investing heavily in building and rotating infrastructure at scale, using

The defining cybersecurity story of late 2025 is not about zero-days or sophisticated exploits. It is about access. Attackers are no longer forcing their way into networks. They are signing in. According to new threat intelligence report by Ontinue , the industry has crossed a structural tipping point where identity has become the central battleground. Credentials, tokens, and machine identities now function as both the entry point and the control layer for modern attacks, f