Latest cybersecurity reporting from selected sources.

Attested TLS: the handshake that can't prove who's on the other end

Attested TLS: the handshake that can't prove who's on the other end

Third-party contractor compromise exposed health information and insurance billing passwords

Other residential proxy brands may rely on the same network

Maybe they were looking for Private Data

Left hand, meet right hand

MeetingTV wants to see the evidence

Don't count on the LLM to return your data - even if you pay up

Researchers scoured logs, finding opsec fail for at least one person who was working with INC and Lynx simultaneously

Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers

Company that also makes insulin pumps and other devices tells users what was exposed months after ShinyHunters attack

Government of the messenger's largest market demands a pause while Meta explains how it plans to stop impersonators

Attackers appear to have reverse-engineered Big Red's patch

Fortunately, they were professional red teamers. Unfortunately, they pwned the network

It's a 'complete BEC operations environment,' Talos researcher says

Safer, cheaper, and nothing to do with cybersecurity

'The original incomplete DeepSeek sample can be transformed into a fully functional attack with minimal effort,' Check Point researcher tells The Reg

People trust their AI assistants and it's easy to abuse this trust

29% of security pros were open to fully autonomous pentesting last year; now only 9% are

Ex-employee claims this 'meets the definition of an insider threat'