15 articles that week
Help Net Security, Friday, September 26th, 2025
Instead of going after software flaws or network weaknesses, attackers are targeting something much easier to steal: identity credentials. A new report from BeyondID calls this growing black market the identity economy, where usernames, passwords, tokens, and access rights are bought and sold much like items on a regular online marketplace.
more →
Help Net Security, Friday, September 26th, 2025
Ransomware activity is climbing again, with a steep increase in the number of victims and the number of groups launching attacks. A new mid-year report from Searchlight Cyber shows how quickly the threat landscape is shifting and why CISOs need to keep adjusting their defenses.
more → Help Net Security, Thursday, September 25th, 2025
Distributed denial-of-service (DDoS) attacks remain one of the most common and disruptive forms of cybercrime. Defenders have traditionally focused on detecting these attacks once they are underway.
more → Cyber Defense Magazine, Thursday, September 25th, 2025
In early 2024, the BlackCat ransomware attack against Change Healthcare caused massive disruption across the U.S. healthcare sector. It later emerged that the cause of this major national incident was traced back to compromised credentials used to remotely access a Change Healthcare Citrix portal. Access to the portal wasn't secured with multi-factor authentication (MFA).
more →
Search Security, Wednesday, September 24th, 2025
Secure your API landscape with these API discovery best practices spanning the entire SDLC. Find hidden endpoints, audit integrations and monitor continuously.
more →
Help Net Security, Wednesday, September 24th, 2025
Attackers have a new favorite playground, and it's not where many security teams are looking. According to fresh data from Bugcrowd, vulnerabilities in hardware and APIs are climbing fast, even as website flaws hold steady.
more → SecurityBrief, Wednesday, September 24th, 2025
As Cybersecurity Awareness Month approaches its 22nd year in October, the perennial theme of "Secure Our World" resonates more urgently than ever.
more →
Security Boulevard, Wednesday, September 24th, 2025
In early September, Palo Alto Networks publicly acknowledged that Secure Web Gateways (SWGs) are architecturally unable to defend against Last Mile Reassembly attacks.
more →
Help Net Security, Tuesday, September 23rd, 2025
By 2030, preemptive cybersecurity solutions will account for 50% of IT security spending, up from less than 5% in 2024, replacing standalone detection and response (DR) solutions as the preferred approach to defend against cyberthreats, according to Gartner.
more → Security Boulevard, Tuesday, September 23rd, 2025
Okay, so here's the thing about passwords: we all hate 'em, right? It's like, are they even doing anything anymore?
more → Search Security, Monday, September 22nd, 2025
The REST architectural style helps applications communicate with each other. Be sure RESTful APIs have the protections necessary to keep attackers at bay.
more → techradar.pro, Monday, September 22nd, 2025
From deepfake fraud to API exploits and logic flaws, fintechs are facing a new wave of AI-driven cyber threats
more →
DARKREADING, Monday, September 22nd, 2025
Zero Trust could help organizations fight back against attackers who use artificial intelligence, but new threats will require the architecture to evolve.
more →
computerweekly.com, Monday, September 22nd, 2025
Cyber security experts offer insights into how to manage service levels, potential lock-in clauses and security gaps in IT supplier contracts
more →
Backup Central, Monday, September 22nd, 2025
When most people think about cybersecurity, they picture hackers in hoodies breaking through firewalls from some remote location.
more →