OnTrac parcel delivery company reports customer data breach
Bleeping Computer reports that the parcel delivery company OnTrac has experienced a data breach, potentially exposing customer personal details following a c...
SC Media
20 articles
Botnets powered by residential proxy networks are growing
Botnets powered by residential proxy networks are proliferating, enabling cybercriminals to evade detection by blending in with legitimate traffic, Lumen Tec...
CheckPoint authentication bypass bug exploited, added to CISA list
CISA orders rapid patching as Check Point auth bypass faces active attacks.
AI plans are being approved. Recovery plans are not
Do you spend more time managing AI agents than you save by using them? Here's how to make your ROI on agentic deployment.
When sensitive data moves everywhere, security attestations become a liability
Despite the CMMC pause, leaders still have to stand behind what they sign.
Balancing lead generation, growth, and security in the age of AI search
AI search visibility demands smarter bot security, not open access.
Phishing the agent: Why identity controls are essential to secure and manage AIs
Guardrails cannot serve as the primary security boundary for AI agents. Identity controls impose firmer limits.
Exploring AI Network Protocols; Vulnerability Truths and Guarantees; and the News - O'Shea Bowens, Jeremiah Grossman - ESW #469
What Attack Surface Management Actually Controls
ASM operates as a six-stage governance chain: discover, classify, assign, route, reduce, and monitor
What Is Application Security? A Complete Guide
Defined as the practice of protecting software applications from threats throughout their lifecycle
What Audit Readiness Actually Controls
Three gaps separate organizations with audit readiness from organizations with audit preparation capability
How to Build Application Detection and Response
Application detection and response programs fail when they collect signals but cannot investigate with them
How to Secure AI Applications in Production
AI application security programs collapse at three predictable control points: system prompt integrity, output handling and runtime visibility gaps
Man charged for using phone's 'duress' password to wipe data
The U.S.
Golden Chickens malware-as-a-service resurfaces with four new families
The Hacker News disclosed that the threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware famil...
Cloud resilience model invalidated by systemic threats
The long-held belief that cloud infrastructure is borderless and inherently resilient is being challenged by a new class of systemic threats.
Vatican's 'Click to Pray' app leaks personal data of hundreds of thousands
A popular Vatican website and mobile app, 'Click to Pray,' was found to be leaking the names and email addresses of hundreds of thousands of its users.
Cybersecurity threats escalate with ransomware, data breaches and online fraud
The cybersecurity landscape continues to expand with increasing risks for governments, businesses and consumers.
UK issues alert over Russian zero-click email attacks
The UK's National Cyber Security Centre (NCSC) issued an alert regarding a new 'zero-click' threat campaign orchestrated by Russian state-backed hackers targ...
GitHub to implement two-tier bug bounty program amid AI-generated report surge
GitHub is launching a two-tier bug bounty program starting July 27, 2026, in response to an increase in low-quality, AI-generated vulnerability reports.