cybersecurity

Google's Present to Enterprise Gmail Users: End-to-End Encryption

Posted on by Admin
Google's Present to Enterprise Gmail Users: End-to-End Encryption

Image: Google All enterprise users of Gmail can now easily apply end-to-end encryption to their emails. Prior to today, this was a luxury reserved for big businesses with significant IT resources, but Google recognises that email attacks are on the rise across the board. Starting today, Gmail users can send end-to-end encrypted emails to others within their organisation; in the coming weeks, they will also be able to send encrypted emails to Gmail inboxes outside…

Read More

Android Malware Exploits a Microsoft-Related Security Blind Spot to Avoid Detection

Posted on by Admin
Android Malware Exploits a Microsoft-Related Security Blind Spot to Avoid Detection

This Motorola Moto G Power 5G shows the midnight blue color option. Image: Amazon New Android malware is using Microsoft’s .NET MAUI to fly under the radar in a new cybersecurity dust-up this week. Disguised as actual services such as banking and social media apps targeting Indian and Chinese-speaking users, the malware is designed to gain access to sensitive information. Cybersecurity experts with McAfee’s Mobile Research Team say that, while the threat is currently aimed…

Read More

Which Top Cybersecurity Role of 2024 Was Featured in 64,000+ Job Postings? | TechRepublic

Posted on by Admin
Which Top Cybersecurity Role of 2024 Was Featured in 64,000+ Job Postings? | TechRepublic

Security engineer was the most common title in cybersecurity job listings in 2024, according to security and IT workforce management platform provider CyberSN. Its report “U.S. Cybersecurity Job Posting Data” was created by pulling together job postings from 30 major job boards and Fortune 500 companies’ job boards between January 2022 and December 2024. The report shows which roles are growing, which are decreasing in demand, and other hiring trends. Security engineer and security analyst…

Read More

Update VMware Tools for Windows NOW: High-Severity Flaw Lets Hackers Bypass Authentication

Posted on by Admin
Update VMware Tools for Windows NOW: High-Severity Flaw Lets Hackers Bypass Authentication

Image: Ferran Rodenas/Flickr/Creative Commons If you use VMware Tools for Windows, it is critical to update to the latest version. Broadcom, which acquired VMware for $69 billion in 2023, has issued a patch for a high-severity vulnerability that is actively being exploited by cybercriminals. The vulnerability affects VMware Tools for Windows versions 11.x.x and 12.x.x, but has been patched in version 12.5.1. Broadcom confirmed that no workarounds are available, so affected users should update immediately….

Read More

Microsoft Adds Even More AI to Its Security Copilot

Posted on by Admin
Microsoft Adds Even More AI to Its Security Copilot

Vasu Jakkal, corporate vice president, Microsoft Security. Image: Microsoft Microsoft is raising the bar in the cybersecurity game with a new wave of AI-driven security agents. The company announced an expansion of its Microsoft Security Copilot, introducing six AI agents designed to tackle cyber threats head-on. These agents, set to launch in April 2025, will assist overwhelmed security teams in handling phishing attacks, data breaches, and identity threats. Cyberattacks have reached unprecedented levels, with Microsoft…

Read More

The Human Factor: Redefining Cybersecurity In The Age Of AI

Posted on by Admin
The Human Factor: Redefining Cybersecurity In The Age Of AI

With 74% of breaches starting with people, securing the human layer is cybersecurity’s most urgent … More priority. getty It is a common mantra in cybersecurity that humans are the weakest link. It’s a notion I often push back on, because it is generally used as a sort of tacit excuse for why cybersecurity tools or processes fail, but there is also an element of truth to it. One of the key takeaways from Verizon’s…

Read More

FBI 'Increasingly Seeing' Malware Distributed In Document Converters

Posted on by Admin
FBI 'Increasingly Seeing' Malware Distributed In Document Converters

Image: iStockphoto/domoyega Threat actors may attempt to distribute malware, including ransomware, by offering free document converters, according to a March 7 report from the FBI’s Denver office. “Agents are increasingly seeing” this type of scam. The scheme has been deployed globally, the FBI warned. How the document conversion scam works Threat actors behind the document converter scam disguise malicious software as a legitimate tool for file conversion. The software may claim to convert .doc files…

Read More

Stealthy Apache Tomcat Critical Exploit Bypasses Security Filters

Posted on by Admin
Stealthy Apache Tomcat Critical Exploit Bypasses Security Filters

Image: cynoclub/Envato Elements Apache Tomcat is under attack as cybercriminals actively exploit a recently disclosed vulnerability, enabling remote code execution (RCE). With simple HTTP requests, attackers can trigger the deserialisation of malicious data and gain control over affected systems. The vulnerability, CVE-2025-24813, was disclosed by Apache on March 10, with the first proof of concept being released on GitHub about 30 hours later, posted by user iSee857. Soon after, security firm Wallarm later saw that…

Read More

iPhone-Android: A Major Privacy Upgrade is Coming Soon

Posted on by Admin
iPhone-Android: A Major Privacy Upgrade is Coming Soon

Image: vinnikava/Envato Elements Cross-platform encrypted messaging between iPhone and Android is coming soon, thanks to updated Rich Communication Services (RCS) standards. The GSM Association has announced that the latest RCS specifications now include end-to-end encryption based on the Messaging Layer Security protocol. This breakthrough, initially teased back in September, will finally allow secure, encrypted messaging between different mobile platforms. This is a huge privacy win — end-to-end encryption (E2EE) means nobody else can see your…

Read More

Medusa Ransomware: FBI & CISA Urge Immediate Action

Posted on by Admin
Medusa Ransomware: FBI & CISA Urge Immediate Action

Image: DC_Studio/Envato Elements Federal cybersecurity officials are raising red flags over a surge in attacks by the Medusa ransomware group. First detected in June 2021, the group has gained traction recently by using basic but effective methods — like phishing emails and exploiting outdated software — to break into systems and hold data hostage. In a joint advisory released last week, the FBI, Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and…

Read More
1 2 3 … 29