Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

AI Security

CISOs Advised to Prepare for Agentic-Ready AI Bill of

Organizations are being urged to evolve AI Bill of Materials (BOMs) to include dynamic execution behaviors and training data provenance alongside stat

1 min read 14 views May 20
Policy & Law

Interpol Leads Operation Ramz to Combat Cybercrime Across

Interpol coordinated a large-scale, multi-country operation across the Middle East and North Africa to disrupt financial fraud and online scams.

1 min read 15 views May 20
AI Security

CISOs Advised to Prepare for AI Bill of Materials

CISOs are encouraged to adopt AI Bill of Materials (BOMs) to track training data and model components, enhancing transparency and risk management in A

1 min read 15 views May 20
Breaches

CISA Contractor Leaks AWS GovCloud Credentials on Public

A CISA contractor exposed plaintext AWS GovCloud keys and internal system credentials on a public GitHub repository.

1 min read 15 views May 18
Vulnerabilities

Researcher Discloses YellowKey Zero-Day Exploit Bypassing

A security researcher known as Nightmare-Eclipse released a zero-day exploit called YellowKey that bypasses BitLocker encryption on default Windows 11

1 min read 15 views May 18
Malware

Operation Blacksmith Targets Software Supply Chain via

A state-sponsored APT group has been exploiting open-source repositories since January 2023 to inject malicious payloads into widely used software pro

1 min read 16 views May 16
AI Security

AI-based video age-verification systems vulnerable to

Researchers have demonstrated that AI-powered video age-verification systems can be successfully bypassed using simple physical disguises, such as a f

1 min read 17 views May 15
Other

Upcoming Cybersecurity Speaking Engagements Announced for

A schedule of upcoming speaking engagements has been released, covering topics such as AI security and national cybersecurity across events in New Yor

1 min read 16 views May 14
Vulnerabilities

Major Tech Vendors Accelerate Patching Cycles Following

Microsoft, Apple, Google, Mozilla, and Oracle have significantly increased patch volumes and release frequency, attributed to the use of Anthropic's '

1 min read 15 views May 12
Ransomware

Instructure Pays Ransom After ShinyHunters Breach Affects

Instructure confirmed that the ShinyHunters group breached Canvas via 'Free-for-Teacher' accounts, exposing data for 275 million users.

1 min read 15 views May 08
Malware

Brazilian DDoS Mitigation Firm Linked to Botnet Targeting

An exposed archive revealed that Huge Networks' infrastructure and CEO's SSH keys were used to power a Mirai-based botnet targeting Brazilian ISPs.

1 min read 15 views Apr 30
Breaches

Scattered Spider Member Tyler Robert Buchanan Pleads Guilty

Tyler Robert Buchanan, a senior member of the Scattered Spider cybercrime group, pleaded guilty to wire fraud and identity theft for his role in massi

1 min read 18 views Apr 21

Want to learn more?

Start your free trial and see Phishlens in action.