Google's March 2025 Android Security Update Fixes Two Actively Exploited Vulnerabilities

Starting with DevSecOps Cheatsheet

A Quick Reference to the Essentials of DevSecOps

How New AI Agents Will Transform Credential Stuffing Attacks

Credential stuffing attacks had a huge impact in 2024, fueled by a vicious circle of infostealer infections and data breaches. But things could be about to get worse still with Computer-Using Agents, a new kind of AI ag...

Suspected Iranian Hackers Used Compromised Indian Firm's Email to Target U.A.E. Aviation Sector

Threat hunters are calling attention to a new highly-targeted phishing campaign that singled out "fewer than five" entities in the United Arab Emirates (U.A.E.) to deliver a previously undocumented Golang backdoor dubbe...

Free Trial | Evaluate the State of Your Cybersecurity Tools

Misconfigurations in your environment are a gateway for security incidents. Prelude continuously monitors your security tools for missing controls and misconfigurations to visualize gaps in your defenses. Create a free account and know your investments are working as expected.

Over 4,000 ISP IPs Targeted in Brute-Force Attacks to Deploy Info Stealers and Cryptominers

Internet service providers (ISPs) in China and the West Coast of the United States have become the target of a mass exploitation campaign that deploys information stealers and cryptocurrency miners on compromised hosts....

Why Aggregating Your Asset Inventory Leads to Better Security

Aggregated IT inventory reveals 10-15% of devices are unmanaged, exposing critical security gaps and increasing breach risks.

Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited—CISA Sounds Alarm

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting software from Cisco, Hitachi Vantara, Microsoft Windows, and Progress WhatsUp Gold to its Known Exploited Vu...

Google's March 2025 Android Security Update Fixes Two Actively Exploited Vulnerabilities

Google has released its monthly Android Security Bulletin for March 2025 to address a total of 44 vulnerabilities, including two that it said have come under active exploitation in the wild. The two high-severity vulner...

Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail

Threat actors are targeting Amazon Web Services (AWS) environments to push out phishing campaigns to unsuspecting targets, according to findings from Palo Alto Networks Unit 42. The cybersecurity company is tracking the...

Building a Smarter Defense

How Gen AI Is Revolutionizing Threat Detection In Cybersecurity