Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Google fined $462M in Ireland over location data collection practices
Ireland’s privacy watchdog today fined Google LLC €403 million, or about $462 million, for collecting users’ location data in breach of GDPR. The tracking was done by three Google features: Web & App Activity, Timeline and GLA. Web & App Activity is a Google
OCC Updates Cyber Audit Rules for Banks
The Office of the Comptroller of the Currency (OCC) said in a bulletin released Monday (Sept. 21) that it updated the structure and references of the OCC Cybersecurity Supervision Work Program (CSW) used by examiners, without adding or changing any procedures
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people already trust: code that takes a bad turn, old payloads coming back, exposed systems, weak checks, fake fixes, and attack paths that look almost t
OpenAI Urges Global Guardrails on Autonomous AI Development
The United States should lead an international effort to develop global technical standards for frontier artificial intelligence, including recursive self-improvement (RSI), OpenAI said in a Monday (Sept. 21) article. RSI could result in humans losing control
Treasury Secretary Says OpenAI Managers Are to Blame for Hugging Face Breach, Not AI Agents
Trump’s Treasury Secretary Scott Bessent thinks AI companies should be held liable for rogue AI incidents, not the AI agents themselves. Speaking to CNBC on Monday morning, Bessent specifically refe
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers a PowerShell backdoor designed to harvest sensitive data from compromised hosts. The backdoor "automatically harvests and exfiltrates business documents, watches the filesystem for new files in real t
Meta’s Muse AI agent faces security scare, raises alarms over AI agent safety
Meta's Muse AI agent hit by zero-day exploit weeks after launch, following Amazon's block and prior security incidents with Muse Spark 1.1.
Cybercriminals Are Hiding New Malware in Torrents for Popular Films
Victims have been identified in Africa, including in Kenya and Uganda.
Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership
With Australian MSP First Focus officially combining with United States headquartered MSP Integris, mid-market ANZ businesses will be able to access deeper AI, security and vertical expertise, backed
EU lawmakers float product liability rules to help avert AI disaster
Brussels is also on a quest to slash more tech regulation in an effort to "simplify" rules to help businesses grow. AI-specific liability rules were suggested by the European Commission in September
Hacker-on-Hacker Crime: ShinyHunters Is Trying to Extort CLOP Ransomware Group
Cybercriminal group ShinyHunters claims to have hijacked the website of a rival gang, allegedly for stealing a way to hack a serious vulnerability in Oracle’s E-Business Suite software. Cybercriminal group ShinyHunters has a surprising new victim: CLOP, a riv
OCC Updates Cyber Audit Rules for Banks
The Office of the Comptroller of the Currency (OCC) said in a bulletin released Monday (Sept. 21) that it updated the structure and references of the OCC Cybersecurity Supervision Work Program (CSW) used by examiners, without adding or changing any procedures