Italy's new facial recognition policy sparks EU law debate
The Italian Senate's EU Policies Committee approved a decree allowing the storage of facial biometric data from cameras in sensitive public areas for seven d...
SC Media
20 articles
Interpol's I-GRIP mechanism intercepts millions in fraud attempts
The I-GRIP initiative connects law enforcement agencies across 196 countries with financial institutions to expedite the process of stopping fraudulent money...
AI chatbots outperform humans in building trust for scams
Researchers from four universities conducted a study pitting AI chatbots against human scammers in a simulation of "pig butchering" scams, a form of romance ...
Rogue AI, the Bar, Breaches, BMC, Hugging Face, Helmuth von Multke, Ike, Shieldfont, - SWN #603
Unspecified threat actors targeting US water systems, CISA warns
CISA reports surge in cyberattacks targeting water utility PLCs.
Non-human identity (NHI) programs stall on detection, not policy
OWASP NHI guidance highlights detection gaps as the biggest security challenge.
What we learned about zero-trust from the OpenAI breach of HuggingFace
Here’s why in a world where AI models can hack other companies, we have to outreason our adversaries.
AiTM phishing overtakes credential theft as top threat to law firms
A new report from eSentire reveals that AiTM attacks accounted for 28.57% of all initial access events in the legal sector, with a 20% year-over-year increas...
KT Corporation fined $39 million for 11-month data breach
The breach, which lasted from October 8, 2024, to September 5, 2025, exposed the personal information of 16,647 KT subscribers.
Cryptomining campaign avoids root access to evade detection
The campaign, identified in May 2026 by Group-IB, uses a modified XMRig miner.
Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet
Amazon linked the campaigns through overlapping C2 indicators, TTPs and code.
Precision privilege containment: Eliminating local admin rights without disrupting productivity
Organizations no longer need to choose between strong endpoint security and a productive workforce.
Okta to acquire identity threat detection startup Permiso Security
The acquisition aims to integrate Permiso’s technology for detecting and mitigating identity threats across human, non-human, and agentic identities into Okt...
UK Department for Education confirms data breach affecting over 600,000 records
The breach, claimed by the ExfilSquad hacking group, exposed names, job titles, and phone numbers of head teachers, university staff, and government officials.
AI amplifies dangling DNS takeover risks, research shows
Security firm Silent Push's research, dubbed "DangleGeddon," utilized AI to massively expand the discovery of vulnerable domains and subdomains.
Russia charges Telegram CEO Pavel Durov with aiding terrorism
The Kremlin claims Telegram facilitated "acts of sabotage and terrorism, mass murder, and cyber fraud," resulting in "numerous human casualties.
Australian privacy watchdog clarifies rules on facial recognition in retail
The OAIC's updated guidance clarifies exceptions to consent obligations for Australian Privacy Principle (APP) entities considering facial recognition in ret...
FTC sues Hims & Hers for alleged deceptive privacy practices and data sharing
The lawsuit alleges that Hims & Hers placed pixel-sized trackers from Meta, Snap, Microsoft, Pinterest, Reddit and X on its website.
Silver Fox group uses new drivers in BYOVD attacks against Japanese manufacturer
The attack chain begins with a phishing lure disguised as an invoice, utilizing attacker-controlled content hosted on legitimate QQ and Tencent Cloud services.
Sysadmin AI adoption lags behind 2024 predictions
The Action1 2026 Survey Report highlights significant gaps between 2024 predictions and 2026 reality for AI adoption in IT workflows.