CYBER45

If you're handling AI agents like a service account or API token, consider yourself behind. AI agents need a fundamentally different approach.

Kaspersky researchers analyze incidents related to The Gentlemen RaaS group, disclose their tools and TTPs, and find a new ransomware variant.

Kaspersky researchers analyze the threat landscape for SMBs in 2026: the rise of attacks involving fake AI tools, phishing schemes, and data sold on the dark web.

The jscrambler npm package was compromised, and simply installing its 8.14.0 release runs an infostealer on your machine. Published on July 11, 2026, the malicious version carries a preinstall hook that drops and executes a native binary, one build each for Windows, macOS, and Linux.

Socket flagged the release six minutes after it was published. If you or one of your

Obscurity isn't a defense. If your company has any Internet-facing vulnerability, you're at risk from multiple threats.

A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security team was thinking about AI agents in the SOC. Smart team. Serious program. They had already connected Claude to a few detection tools and were seeing real value in specific investigations. But as we mapped out the broader architecture, something kept nagging at me. The design they were building

Footie fans? Overreacting? There's a first time for everything

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group.

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.

Consumer security updates now run to October 2027, and Redmond doesn't mention Windows 11 once