Featured

Threat researchers at Huntress have identified what they describe as a clear example of AI-generated, or "vibe-coded", malware deployed during a live intrusion, a development that the security vendor says signals a meaningful shift in how attackers build tooling, and how defenders will need to detect it. The discovery centres on a bespoke PowerShell script recovered by Huntress analysts Jevon Ang and Dray Agha following an incident on 3 June. The script, designed to enumerate...

Cybersecurity has never been higher on the business agenda. As organisations face increasing threat challenges, rising compliance expectations and growing pressure to demonstrate resilience, the conversation is shifting beyond technology alone. Businesses are looking for practical guidance, trusted expertise and long-term partners who can help them manage cyber risk with confidence. Following the launch of WorkNest Secure, the new specialist cybersecurity, information security and data protection division within WorkNest Group, The Gurus caught up with...

A new threat intelligence report from WatchGuard is warning organisations worldwide to strengthen behavioural detection capabilities after uncovering an espionage campaign by the Iran-linked threat group MuddyWater that successfully targeted high-value organisations across four continents. The report details how the group, also known as Seedworm, targeted organisations across manufacturing, aviation, financial services, education, professional services and the public sector during the first quarter of 2026. The campaign coincides with escalating geopolitical tensions involving Iran, although...

Synthetic media has moved from technical curiosity to mainstream threat in just a few years, with deepfakes now cheap enough to produce that a free app and a handful of seconds of scraped audio can generate convincing fakes. The consequences stretch well beyond political misinformation: corporate fraud running into tens of millions of dollars, biometric security checks being bypassed, and a largely under-reported epidemic of non-consensual intimate imagery. As regulation in the EU, UK and US...

A lack of continuous validation is preventing organisations from turning cyber visibility into meaningful risk reduction, according to new research from Filigran. The company's State of Threat Management Report, based on a survey of 550 security decision-makers and practitioners worldwide, found that although organisations are investing heavily in threat intelligence and security tools, many continue to struggle to prioritise the risks that matter most. According to the research, security teams spend an average of 42%...

Keeper Security has announced the availability of the Keeper Teams App, a new integration designed to bring privileged access request and approval workflows directly into Microsoft Teams. Powered by Keeper Secrets Manager (KSM) and Commander Service Mode, the application enables organisations to manage privileged credential access within Teams while maintaining Keeper's zero-knowledge security model. According to the company, all cryptographic operations and credential data remain within the customer's own environment rather than passing through Keeper's...

The Public Accounts Committee (PAC) published a damning report this week, finding that national museums and galleries across the UK are being left exposed to cyber attacks, physical theft, and financial instability, while the Department for Culture, Media and Sport (DCMS) takes a largely hands-off approach. The report highlights a pattern that will be familiar to the security community: high-profile incidents, promises of lessons learned, and a conspicuous absence of concrete follow-through. The 2023 British...

Despite growing awareness of quantum computing risks and increasing pressure on organisations to prepare for the transition to post-quantum cryptography (PQC), most internet-facing systems remain unprepared for a quantum-safe future, according to new research from Forescout Research – Vedere Labs. The report, published today, reveals that while adoption of PQC-capable technologies has accelerated over the past year, progress remains uneven across both internet infrastructure and enterprise networks. Globally, the number of SSH servers supporting post-quantum...

Imagine completing a two-factor authentication check on a real Microsoft login page and still handing a criminal full access to your email account. That is not a hypothetical. According to new research published this week by cybersecurity company Huntress, it happened across hundreds of organisations in the first four months of 2026 and the victims had no idea. The research, titled “EvilTokens and the Rise of AI-Powered Phishing,” documents a criminal phishing-as-a-service (PhaaS) platform that...

The White House has unveiled a major new cybersecurity initiative aimed at protecting U.S. government systems and critical infrastructure from the emerging threat posed by quantum computing, setting firm deadlines for the migration to post-quantum cryptography (PQC). President Donald Trump this week signed a National Security Presidential Memorandum and related executive actions designed to accelerate the transition away from traditional cryptographic standards that could eventually be broken by sufficiently powerful quantum computers. The measures establish...