Category index

Cyber Security

4276 articles

4276 ARTICLES

FEATURED REPORT

Cognyte Sells a Mobile Cell Surveillance Van

Yet another Israeli mass surveillance company: Made by Israeli surveillance company Cognyte, the tech simulates a mobile phone tower, which forces nearby phones to connect to it. That enables cops to keep tabs on any phones in the vicinity whether they’re owned by a suspect in a case or not. Cognyte’s contract with the state of Texas reveals that the simulator, called FalcoNet, can be concealed within the vehicles, hidden in a backpack for on-foot missions or attached to a helicopter. It’s the same technology as the infamous Stingray, one of the original cell-site simulators made by defense giant L3Harris…

BY Bruce Schneier

MIN READ 1 MIN READ

EXPLORE north_east

Cognyte Sells a Mobile Cell Surveillance Van

CYBERSECURITY

What’s Hiding in Your Mobile Apps? Lookout MSEC Aims to Find Out

The new Mobile Security Exposure Center creates SBOMs for enterprise mobile apps to uncover vulnerable components, dependencies and hidden risks. The post What’s Hiding in Your Mobile Apps? Lookout MSEC Aims to Find Out appeared first on SecurityWeek.

1 MIN READ arrow_forward

CYBERSECURITY

Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware

The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams has been observed using a sophisticated crypter service called Cruciferra. According to a new analysis by Proofpoint, Cruciferra has been utilized by various unrelated cybercriminal threat clusters to deliver a wide array of remote

1 MIN READ arrow_forward

CYBERSECURITY

Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials

A threat actor has been using the compromised appliances to target the Microsoft 365 accounts of traveling corporate employees. The post Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials appeared first on SecurityWeek.

1 MIN READ arrow_forward

CYBERSECURITY

Anthropic’s Opus 5 Nears Mythos 5 on Finding Bugs, but Falls Short on Exploits

Binary-based vulnerability scanning, penetration testing, and exploit generation are blocked in Opus 5. The post Anthropic’s Opus 5 Nears Mythos 5 on Finding Bugs, but Falls Short on Exploits appeared first on SecurityWeek.

1 MIN READ arrow_forward

CYBERSECURITY

DentaQuest Data Breach Potentially Impacts Over 23 Million People

In May 2026, hackers stole personal and dental health information from DentaQuest’s computer network. The post DentaQuest Data Breach Potentially Impacts Over 23 Million People appeared first on SecurityWeek.

1 MIN READ arrow_forward

CYBERSECURITY

TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments

Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor with ties to East Asia targeting government entities in the Middle East. The intrusions have resulted in the deployment of previously unreported malware families dubbed TELESHIM, MIXEDKEY, and BINDCLOAK, according to Zscaler ThreatLabz. The cybersecurity firm said it detected the campaign earlier this month.

1 MIN READ arrow_forward

CYBERSECURITY

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a release is published before opening a pull request. “The cooldown configuration option in the dependabot.yml still controls the behavior, though, so you can choose a different cooldown parameter that fits your project,” the Microsoft-owned subsidiary said. According to GitHub, the

1 MIN READ arrow_forward

CYBERSECURITY

Inside Elastic InfoSec's agentic SOC: How we cut AI agent LLM calls by 60%

We run fourteen AI agents that triage Elastic InfoSec alerts. They were taking 19 LLM calls to do work that needed 8. Here’s the five-step optimization loop we run across the fleet, plus the prompt template you can use with any AI assistant.

1 MIN READ arrow_forward

CYBERSECURITY

Mitigating WordPress attacks with containers

The wp2shell WordPress exploit enables remote code execution. Learn how hardened containers help reduce the blast radius of compromise.

1 MIN READ arrow_forward

CYBERSECURITY

The Self-Service Roadmap: Navigating the Auth0 Dashboard Subscriptions Tab

A practical guide for technical leaders and developers on leveraging the Auth0 Subscriptions tab. Learn how to conduct an Auth0 plan comparison, evaluate add-ons, and monitor Auth0 quota utilization to align your identity infrastructure with product growth

1 MIN READ arrow_forward

CYBERSECURITY

What Is AI Pentesting and How Does It Works?

AI pentesting uses reasoning-capable models to continuously find and validate the flaws scanners miss, especially broken authorization and business-logic abuse.

1 MIN READ arrow_forward