Enterprise Security Tech

SocGholish, the insidious “fake update” scheme that lures users into installing malicious code masquerading as browser or plugin patches — has quietly evolved into a full-blown Malware-as-a-Service ecosystem. New technical analysis from threat researchers at Trustwave SpiderLabs , a LevelBlue company, shows the operation now functions less like a single campaign and more like an industrial distribution layer that any criminal buyer can plug into. The result: access-for-hire

In the past year, the internet’s biggest security threat hasn’t been a zero-day exploit or a sophisticated ransomware operation. It’s something far more insidious—and human. Or at least, it sounds human. AI-powered phishing campaigns are rewriting the rules of online deception. Voice-cloned executives, fake “customer support” chats, and hyper-realistic scam websites now blur the line between reality and manipulation. The technology once used to enhance creativity and producti

In the latest move to fuse observability, automation, and AI, SolarWinds today announced the launch of its SolarWinds AI Agent —a new intelligent assistant designed to help IT teams predict failures, automate responses, and bridge what the company calls the “resilience gap.” According to this year’s SolarWinds IT Trends Report , nearly half of IT leaders report unplanned outages even though most rate their infrastructure as resilient. The company’s answer: embed an AI-driven

In a daring escalation of credential-based social engineering, threat actors are now masquerading as security updates for widely used password managers to surreptitiously implant remote access tools on target machines. The scheme — currently attacking LastPass and Bitwarden users — represents a shift from credential-harvesting phish to full device hijack via trusted infrastructure. The Scam in Detail: Disguised as a Safe Update Beginning over the recent holiday weekend, use

In a move signaling its next phase of expansion, response-management platform Loopio has appointed Joanna Kmiec as its new Chief People Officer (CPO) —a strategic role that places equal weight on people, technology, and innovation as the company scales its global footprint. Kmiec joins Loopio with over two decades of experience leading culture and talent strategies for fast-growing tech organizations. She previously served as Global SVP of People & Culture at Elastic Path

By the time F5 Networks discovered that foreign hackers had been inside its systems for more than a year, the damage was already done. The attackers had stolen portions of the source code for BIG-IP , one of the world’s most widely deployed application delivery and security platforms—software that sits at the heart of countless enterprise and government networks. Now, investigators believe a Chinese espionage group , tracked as UNC5221 , is responsible. The malware used— Bric