Enterprise Security Tech

A newly disclosed Windows zero-day is raising fresh questions about Microsoft Defender after Cyderes researchers found that the exploit can bypass a security fix Microsoft released just last month. Dubbed ShieldBreak, the vulnerability allows a standard Windows user to escalate privileges to NT AUTHORITY\SYSTEM, effectively gaining the highest level of local access without explo...

As artificial intelligence reshapes cybersecurity, security teams are confronting a new challenge: moving at machine speed without sacrificing accuracy, visibility, or control. In this interview, Nick Lantuh, President of Interpres Group within CyberProof, discusses how AI is changing the threat landscape, security operations, and enterprise risk. He also explains why strong dat...

This guest article was authored by Rachel Vrabec, CEO of Kanary Every CISO can tell you where their network ends. Far fewer can tell you where their organization's human attack surface begins. That gap is exactly where adversaries are operating. The most sophisticated attack campaigns targeting enterprises today don't start with a vulnerability scan or a zero-day exploit. They s...

Hackers are targeting some of the biggest names in private equity and finance with a sprawling social engineering campaign that shows attackers do not need sophisticated malware when they can simply convince employees to hand over access. According to Google threat intelligence and internet infrastructure data reviewed by Reuters, attackers created at least 72 malicious websites...

A malware attack knocked municipal systems offline in Suisun City, California, disrupting 911 routing, police and fire communications, and online government services while exposing the growing cyber risk facing local governments. Suisun City has declared a state of emergency after a cyberattack forced officials to shut down the Northern California municipality’s IT network, disr...