Featured

A newly discovered ransomware operation dubbed Fog is raising fresh concerns in the cybersecurity community after researchers found it leveraging a highly unusual mix of legitimate business software and open-source offensive security tools. The campaign, observed in June 2025, is part of a growing trend where cybercriminals are repurposing trusted programs to evade traditional detection methods and maximise their post-exploitation capabilities. The attackers behind Fog aren’t simply deploying encryption and demanding payment; they’re laying the...

In an effort to overhaul traditional security awareness training (SAT), cybersecurity firm Huntress has introduced Threat Simulator, a new feature of its Managed Security Awareness Training (SAT) platform, designed to immerse users in the tactics, techniques, and mindset of cyber attackers. Old-school SAT methods are falling short, according to Huntress, which cites passive, oversimplified video content and one-size-fits-all programs as key contributors to ineffective training. The new Threat Simulator flips the script by offering short, game-like simulations that...

Advanced Cyber Defence Systems (ACDS) has today unveiled plans for further global expansion with the establishment of its new French entity. This follows its expansion across APAC last year through partnerships and personnel hires in the region. ACDS France will help organisations across France, as well as mainland Europe, to protect the expanded attack surface that comes with building and running complex, often multi-national, organisations. The expansion of ACDS into France comes at a time...

With Infosecurity Europe around the corner next week, planning your schedule can be tricky. But never fear! The Gurus have been busy collecting a selection of unmissable events to help you plan your days and ensure you get the most out of your visit.  First up: the talks. And there are a lot to choose from! Here’s a small selection of ones we think you’ll enjoy:   Tuesday Talks Sam Swift, senior director of marketing...

The crypto industry just got a major wake-up call. In early 2025, the U.S. Senate advanced the GENIUS bill. This is some proposed legislation meant for stablecoins, which are digital assets that are tied to currencies such as the dollar or euro. Even though the bill needs to clear more hurdles, its progress shows that Washington is paying more attention to crypto-based financial products. So what does this mean for startup investors? Especially those backing...

Keeper Security, the cybersecurity provider of zero-trust and zero-knowledge Privileged Access Management (PAM) software protecting passwords, passkeys, privileged accounts, secrets and remote connections, is pleased to announce that security industry veteran Shane Barney has been appointed Chief Information Security Officer (CISO). Shane joins Keeper from the U.S. Citizenship and Immigration Services (USCIS), where he served as the agency’s CISO for six years. As a leader in AI security, Shane holds a relevant and high-demand skill...

The modern business environment exposes organizations to a range of challenges that affect business operations, hence the need for robust regulations. Ignoring standards and guidelines can lead to costly fines, operational disruptions, and reputational damage. Last year, a US court asked a bank to pay USD$3 billion in fines—the biggest in history—for having weak monitoring systems that facilitated money laundering activities. (1) Keeping pace with the latest relevant rules and conducting mandatory training can help...

WatchGuard® Technologies, a provider of unified cybersecurity for managed service providers (MSPs), today announced a planned leadership transition. After a decade of impactful leadership, Chief Executive Officer (CEO) Prakash Panjwani will transition out of his operational role, continuing to serve on the Board of Directors and as a strategic advisor to the company. Vats Srivatsan, a cybersecurity industry veteran and Operating Partner at Vector Capital, has been named Interim CEO effective May 14, 2025, bringing...

AI is truly making its way into every aspect of business operations, and rightly so. When we proactively test systems and applications to uncover weaknesses before attackers do, we’re carrying out penetration testing, often called “ethical hacking.” By staging these controlled attacks that mimic real-world threats, we expose gaps in processes and controls. AI penetration testing evaluates the security of artificial intelligence systems, specifically those utilizing machine learning and large language models (LLMs), identifying vulnerabilities...

Cybersecurity researchers at Huntress have issued a warning after confirming active exploitation of a critical remote code execution (RCE) vulnerability in Samsung’s MagicINFO 9 digital signage software. The flaw, tracked as CVE-2024-34515, allows unauthenticated attackers to execute arbitrary code on vulnerable servers by sending a malicious HTTP request. Tens of thousands of MagicINFO instances, many with default configurations, are exposed to the Internet, which means the attack surface is significant. In their latest blog post,...