Enterprise Security Tech

A pair of security flaws in Shynet, the self-hosted web analytics platform used by developers and privacy-conscious website owners, shows how even lightweight tracking software can become a powerful attack surface when it sits inside the browser flow of multiple sites. Security researchers at Bishop Fox disclosed two vulnerabilities in Shynet version 0.13.1 that could allow unauthenticated attackers to compromise tracked websites or hijack user accounts. The most serious issu

Token has appointed veteran cybersecurity executive Torrell Funderburk to its Industry Advisory Board, strengthening the company’s CISO bench as enterprises confront a new identity crisis created by AI agents, deepfakes, and credential-based attacks. Funderburk is a two-time Top Global CISO who has led enterprise security at Sealed Air, a Fortune 500 company, and Maestro Health, an AXA subsidiary. His appointment gives Token another practitioner voice at a moment when identit

U.S. manufacturers are moving fast into Industry 4.0, but the cyber risk is moving with them. A new report from Integris finds that manufacturers are rapidly adopting cloud infrastructure, AI, robotics, automation, and smart factory systems, even as many report serious security incidents across email, mobile devices, cloud environments, and databases. The findings suggest that the next phase of manufacturing competition will not be defined only by who can automate the fastest

The White House’s new executive order on quantum innovation is putting fresh pressure on federal agencies and enterprises to prepare for a future where today’s encryption may no longer be safe. Signed June 22, the order directs the federal government to update the National Quantum Strategy, accelerate quantum computing, sensing and networking programs, strengthen domestic quantum supply chains, expand the quantum workforce and improve protections around quantum technologies.

A coordinated malware campaign on the JetBrains Marketplace is turning trusted developer tools into a credential theft pipeline, according to new research from Aikido Security. Researchers identified 15 malicious JetBrains plugins posing as AI coding assistants for DeepSeek and other large language models. The plugins advertise common developer features such as chat, code review, commit message generation, bug detection, and unit test creation. The catch: when users enter an

A DragonForce ransomware attack has exposed a new problem for enterprise defenders: attackers are no longer just hiding behind disposable servers and shady domains. They are increasingly blending into the trusted cloud services companies rely on every day. Broadcom’s Symantec and Carbon Black threat hunters say they found a new Go-based backdoor, tracked as Backdoor.Turn, during an investigation into an attack on a U.S. services company. The malware is notable because it rout