CYBER45

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk.

Teams are dealing with a truly dangerous problem — automation that works, but that no one understands.

Threat actors don't need any special authentication to reach a target endpoint — they just need to know where it is.

2.5 million people were affected, in a breach that could spell more trouble down the line.

Organizations have never had greater awareness of cyber risk. Yet turning that awareness into operational resilience has never been more challenging. The 2026 Bitdefender Cybersecurity Assessment confirms this is the case, as this year's findings reveal a series of surprising contradictions.

Here are a few examples, based on the independent survey of 1,200 IT and cybersecurity professionals

Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical security flaw. [...]

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system.

The U.S. Federal Trade Commission (FTC) says Amazon will pay a $2.25 million civil penalty to settle charges that it blocked identity theft victims' access to transaction records. [...]

An in-depth analysis of Umbrij, a new tool used by the ToddyCat APT group to compromise corporate email communications in Gmail. The attack targeted OAuth authorization tokens, allowing threat actors to gain access to Google services.

Home Office deals with Deloitte and PA Consulting raise questions over Cabinet Office spending controls