Cybercriminals have been observed increasingly leveraging Atlantis AIO, a sophisticated tool designed to automate credential stuffing attacks across more than 140 platforms. This software enables attackers to systematically test many stolen username and password combinations, facilitating unauthorized access to various online services. Understanding Credential Stuffing Credential stuffing involves using stolen or leaked login credentials to gain unauthorized access to user accounts. Attackers exploit the common practice of password reuse across multiple sites, employing automated tools…

This post was contributed by Lance Haig, a solutions engineer at Docker. In today’s fast-paced development environments, balancing productivity with security while rapidly innovating is a constant juggle for senior leaders. Slow feedback loops, inconsistent environments, and cumbersome tooling can derail progress. As a solutions engineer at Docker, I’ve learned from my conversations with industry leaders that a key focus for senior leaders is on creating processes and providing tools that let developers move faster…

As cyber threats continue to surge, businesses face growing pressure to fortify their defences and ensure operational continuity. Regulatory frameworks like the Network and Information Systems Directive 2 (NIS2) reflect this urgency, offering a structured approach to bolstering cybersecurity resilience. NIS2 sets the bar for critical infrastructure and essential services across the European Union, aiming to protect vital systems from breaches and disruptions. However, for organisations operating in sectors covered by the directive, compliance isn’t…

The US National Institute of Standards and Technology (NIST) has warned that there are significant challenges and limitations for mitigating attacks on AI and machine learning (ML) systems. The agency urged the cybersecurity and research community to develop improved mitigations for adversarial ML (AML). The report noted that the data-based nature of ML systems opens new potential vectors for attacks against these systems’ security, privacy and safety, that are beyond the threats faced by traditional…