Tag: business

Fake rooms, props and a script to lure victims: inside an abandoned Cambodia scam centre

Mar 14, 2026 5:10 AM

Tags: business, finance, fraud, group, military, office, phone, scam, service

Sprawling compound, including mock-up banks and police offices, uncovered by Thai military during border clashesIt is as if you have walked into a branch of one of Vietnam’s banks. A row of customer service desks, divided by plastic screens, with landline phones, promotional leaflets and staff business cards. A seated waiting area and a private…
An AI Agent Didn’t Hack McKinsey. Its Exposed APIs Did.

Mar 14, 2026 1:09 AM

Tags: access, ai, api, attack, authentication, breach, business, ceo, control, data, data-breach, endpoint, infrastructure, Internet, jobs, radius, risk, service, tool

This week’s McKinsey incident should be a wake-up call for every enterprise moving fast to deploy AI. Not because AI itself is inherently insecure. But because too many organizations are still thinking about AI security at the model layer, while the real enterprise risk sits in the action layer: the APIs, MCP servers, internal services,…
How SMBs Can Proactively Strengthen Cybersecurity

Mar 13, 2026 9:09 PM

Tags: access, attack, best-practice, business, ciso, compliance, control, cyber, cyberattack, cybercrime, cybersecurity, data, identity, infrastructure, resilience, risk, service, tool, update

Cyber attackers increasingly target SMBs because they are often the easiest path into larger supply chains. As cyberattacks are ramping up, specifically against Critical Infrastructure sectors, Small and Medium Businesses (SMBs) are feeling the pressure and asking what they can do to better protect themselves in reasonable ways. Don’t Accept Failure SMBs often feel overwhelmed when…
Top 5 AI Access Risks for CISOs and How AI Governance Closes the Gaps

Mar 13, 2026 9:09 PM

Tags: access, ai, business, ciso, governance, identity, risk, service

AI agents, copilots, or service accounts acting in ERP/SaaS systems are already making real decisions in your business, often with more access and less oversight than many human users. In many enterprises, non-human identities are often provisioned with broad permissions without explicit owners. For CISOs, the most urgent risks now sit where AI, identity, and……
Authorities Shut Down Proxy Service Linked to Malware Campaign Targeting Thousands of Users

Mar 13, 2026 1:09 PM

Tags: business, cyber, infrastructure, international, law, malicious, malware, router, service

A coordinated international law enforcement operation successfully dismantled SocksEscort, a massive malicious residential proxy network. Led by the U.S. Justice Department alongside several European allies, the operation disrupted a sophisticated infrastructure that compromised thousands of residential and small business routers globally. By executing seizure warrants against dozens of U.S.-registered domains, authorities effectively halted a criminal…
Understanding SOC 2 Controls for SaaS Providers

Mar 13, 2026 12:10 PM

Tags: business, control, data, framework, governance, saas, soc, software, technology

For SaaS providers, trust is a core part of the offering. Customers rely on software platforms to process data, support business operations, and integrate with wider technology ecosystems. As a result, demonstrating effective security and governance controls using frameworks like SOC 2 has become an increasingly important requirement when selling to enterprise customers. SOC 2″¦…
Hybrid resilience: Designing incident response across on-prem, cloud and SaaS without losing your mind

Mar 13, 2026 11:10 AM

Tags: access, authentication, business, cloud, communications, data, data-breach, group, identity, incident response, metric, mitigation, network, radius, resilience, saas, service, strategy, technology, update

Severity is driven by customer impact, not by who is pagedWe maintain one current hypothesis, even if it is wrongWe keep one shared timeline that captures decisions, not just symptomsWe communicate on a predictable cadence, even when answers are incompleteEvery action has a named owner and an explicit “time we expect to learn”The biggest behavior…
Hybrid resilience: Designing incident response across on-prem, cloud and SaaS without losing your mind

Mar 13, 2026 11:10 AM

Tags: access, authentication, business, cloud, communications, data, data-breach, group, identity, incident response, metric, mitigation, network, radius, resilience, saas, service, strategy, technology, update

Severity is driven by customer impact, not by who is pagedWe maintain one current hypothesis, even if it is wrongWe keep one shared timeline that captures decisions, not just symptomsWe communicate on a predictable cadence, even when answers are incompleteEvery action has a named owner and an explicit “time we expect to learn”The biggest behavior…
Iran-Linked Handala Ramps Up Wiper Attacks on Israeli, Western Targets

Mar 13, 2026 8:11 AM

Tags: attack, business, cyber, intelligence, iran, malware, risk

Tracking an increased risk of wiper attacks related to the conflict with Iran, including multiple related incidents impacting organizations in Israel and the US. For the latest intelligence on cyberattacks. The campaign uses destructive “wiper” malware designed to erase systems and disrupt business operations permanently. Security experts believe these activities are part of a broader…
Authorities Disrupt SocksEscort Proxy Botnet Exploiting 369,000 IPs Across 163 Countries

Mar 13, 2026 8:11 AM

Tags: botnet, business, exploit, international, Internet, law, malware, router, service

A court-authorized international law enforcement operation has dismantled a criminal proxy service named SocksEscort that enslaved thousands of residential routers worldwide into a botnet for committing large-scale fraud.”SocksEscort infected home and small business internet routers with malware,” the U.S. Department of Justice (DoJ) said. “The malware allowed SocksEscort to direct internet First seen on thehackernews.com…
Microsoft Copilot Email and Teams Summarization Flaw Opens Door to Phishing Attacks

Mar 13, 2026 6:10 AM

Tags: ai, attack, business, cyber, email, flaw, intelligence, microsoft, phishing

Artificial intelligence assistants have transformed daily business operations, helping teams manage overflowing inboxes and summarize complex communications. Microsoft Copilot integrates directly into these workflows, pulling context from various Microsoft 365 applications to streamline tasks. However, this convenience introduces a new security boundary: what happens when Copilot follows hidden instructions written by an attacker inside an…
Telus Digital hit with massive data breach

Mar 13, 2026 5:09 AM

Tags: access, breach, business, credentials, cyber, cybersecurity, data, data-breach, defense, detection, encryption, exploit, extortion, group, identity, incident response, law, malware, mfa, mitigation, monitoring, network, ransomware, risk, theft, threat, unauthorized, vulnerability

CSO on Thursday, Telus Digital said it is “investigating a cybersecurity incident involving unauthorized access to a limited number of our systems. Upon discovery, we took immediate steps to address the unauthorized activity and secure our systems against further intrusion. We are actively managing the situation and continue to monitor it closely.”The statement went on…
Telus Digital hit with massive data breach

Mar 13, 2026 5:09 AM

Tags: access, breach, business, credentials, cyber, cybersecurity, data, data-breach, defense, detection, encryption, exploit, extortion, group, identity, incident response, law, malware, mfa, mitigation, monitoring, network, ransomware, risk, theft, threat, unauthorized, vulnerability

CSO on Thursday, Telus Digital said it is “investigating a cybersecurity incident involving unauthorized access to a limited number of our systems. Upon discovery, we took immediate steps to address the unauthorized activity and secure our systems against further intrusion. We are actively managing the situation and continue to monitor it closely.”The statement went on…
Why Stryker’s Outage Is a Disaster Recovery Wake-Up Call

Mar 12, 2026 8:10 PM

Tags: business, cyberattack, iran

The Iranian cyberattack on Stryker is the kind of stress test that business continuity and disaster recovery programs often do not plan for. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/stryker-outage-disaster-recovery-wake-up-call
Telus Digital confirms breach after hacker claims 1 petabyte data theft

Mar 12, 2026 4:09 PM

Tags: breach, business, data, hacker, security-incident, theft, threat

Canadian business process outsourcing giant Telus Digital has confirmed it suffered a security incident after threat actors claimed to have stolen nearly 1 petabyte of data from the company in a multi-month breach. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/telus-digital-confirms-breach-after-hacker-claims-1-petabyte-data-theft/
Industry to NIST: Keep agentic AI standards flexible and voluntary

Mar 11, 2026 5:48 PM

Tags: ai, business, nist

The business community said security guidance should reflect the nascency and diversity of the field. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-agents-security-nist-industry-feedback/814434/
Channel momentum continues at AvePoint

Mar 11, 2026 2:48 PM

Tags: business, finance

Recent financial results revealed an increasing contribution to the business from its channel base First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366639981/Channel-momentum-continues-at-AvePoint
A 5-step approach to taming shadow AI

Mar 11, 2026 12:49 PM

Tags: ai, api, business, communications, compliance, control, data, defense, finance, framework, governance, incident response, monitoring, network, nist, risk, risk-assessment, risk-management, service, strategy, technology, tool

thought work happened and how it actually does today.Here’s a five-step approach to put a robust AI-risk management framework in place: Employees often use public model APIs, browser-based prompt tools and unsanctioned or ungoverned internal chatbots to boost productivity without considering the risk of exposing sensitive data.AI usage is not difficult to identify; you just need…
12 ways attackers abuse cloud services to hack your enterprise

Mar 11, 2026 8:47 AM

Tags: access, ai, api, attack, backdoor, backup, business, ceo, china, cloud, communications, control, corporate, credentials, crowdstrike, cyber, cybercrime, cyberespionage, cybersecurity, data, defense, detection, endpoint, exploit, extortion, firewall, framework, group, hacking, incident, incident response, infrastructure, kubernetes, login, malicious, malware, microsoft, network, openai, phishing, ransomware, russia, service, social-engineering, threat, tool

Hiding command-and-control in trusted APIs: Attackers are also forging malware that routes C2 traffic through trusted services such as OpenAI APIs.For example, the SesameOp backdoor routes traffic through OpenAI’s Assistants API, masking C2 communications as legitimate AI development work.”In cases such as the SesameOp backdoor, traffic looks like normal AI development activity,” says Parthiban Jegatheesan,…
Threat intelligence by ESET is a game changer

Mar 10, 2026 9:48 PM

Tags: ai, business, ciso, cybersecurity, data, detection, edr, exploit, identity, india, intelligence, phishing, service, social-engineering, threat, vulnerability, zero-day

The Advent of AI Ransomware detections in India surged by 70% between the second half of 2024 and the first half of 2025 as per ESET’s Telemetry. Phishing remains the most prevalent cyberthreat affecting Indian users, underscoring the ongoing need for vigilance and education around social engineering tactics.Attacks are increasing on edge systems and appliances as…
OpenAI Acquires Security Startup Promptfoo to Fortify AI Agents

Mar 10, 2026 5:47 PM

Tags: ai, business, data, finance, intelligence, openai, startup

OpenAI has snapped up Promptfoo, a specialized artificial intelligence (AI) security startup, to bolster the safety of autonomous digital workers and convince enterprise clients that AI co-workers are ready for high-stakes business environments. OpenAI did not disclose financial terms of the transaction. PitchBook data indicates Promptfoo was valued at $119 million following a $22 million..…
The Economic Argument: The Real Cost of Insecure APIs in the AI Era

Mar 10, 2026 3:48 PM

Tags: access, ai, api, application-security, attack, business, compliance, control, corporate, cybersecurity, data, defense, exploit, finance, flaw, framework, governance, identity, injection, international, jobs, malicious, privacy, regulation, risk, threat, tool, vulnerability

When cybersecurity teams talk about risk, they usually speak in technical terms like vulnerabilities, exploits, and attack vectors. But when they walk into the boardroom, they need to speak a different language. They need to speak about cost. In the era of AI, the cost of insecure APIs has shifted from a potential liability to…
Top 10 Best Anti-Phishing Tools in 2026

Mar 10, 2026 3:48 PM

Tags: ai, business, cyber, cybersecurity, deep-fake, email, exploit, phishing, spam, threat, tool

The cybersecurity landscape has shifted dramatically, and traditional spam filters are no longer enough to protect sensitive enterprise data. As we navigate through 2026, threat actors are leveraging sophisticated AI-powered exploits to bypass standard security protocols, craft hyper-realistic deepfake audio messages, and execute highly targeted Business Email Compromise (BEC) campaigns. Phishing has evolved from obvious,…
LeakyLooker: Hacking Google Cloud’s Data via Dangerous Looker Studio Vulnerabilities

Mar 10, 2026 2:47 PM

Tags: access, api, attack, authentication, breach, business, cloud, control, credentials, data, data-breach, email, exploit, flaw, google, group, guide, hacking, identity, infrastructure, injection, intelligence, jobs, leak, malicious, mitigation, monitoring, network, oracle, password, programming, service, sql, tool, unauthorized, update, vulnerability

Tenable Research revealed “LeakyLooker,” a set of nine novel cross-tenant vulnerabilities in Google Looker Studio. These flaws could have let attackers exfiltrate or modify data across Google services like BigQuery and Google Sheets. Google has since remediated all identified issues. We discovered and disclosed nine novel cross-tenant vulnerabilities in Google Looker Studio (formerly Data Studio).…
The OT security time bomb: Why legacy industrial systems are the biggest cyber risk nobody wants to fix

Mar 10, 2026 12:47 PM

Tags: access, attack, authentication, awareness, business, ciso, compliance, control, cyber, cybersecurity, data, detection, exploit, firewall, incident, incident response, infrastructure, insurance, ISO-27001, metric, mfa, monitoring, network, office, phishing, ransomware, regulation, resilience, risk, risk-management, service, siem, soc, stuxnet, supply-chain, tool, vpn, vulnerability, zero-day

Why everyone knows it’s burning, but nobody pulls the fire alarm: When I talk to OT managers, production leads or plant engineers, I rarely hear, “We didn’t know we had a problem.” Far more often, it’s, “We know it’s critical, but we can’t just shut it down.” This gap between awareness and action is the…
Why access decisions are becoming the weakest link in identity security

Mar 10, 2026 10:47 AM

Tags: access, ai, api, attack, authentication, automation, breach, business, ciso, control, credentials, data, finance, governance, group, iam, identity, least-privilege, login, okta, radius, risk, saas, service, technology, tool

The SSO fallacy: Why authentication is not a guarantee: I’m often asked by business and technology leaders, “If we have SSO enabled, why do we still need to worry about granular access controls?” The underlying assumption is that once a user is authenticated through a central, secure portal, the hard work is done.In practice, SSO…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
Nasscom Calls for Vigilance as Firms Brace for Impact from West Asia Conflict

Mar 10, 2026 7:47 AM

Tags: advisory, business, cybersecurity, framework, india, technology

As tensions linked to the ongoing West Asia conflict continue to shape the geopolitical environment, India’s technology industry body NASSCOM has urged member companies to remain alert and strengthen operational preparedness. The NASSCOM advisory highlights the need for heightened vigilance across business continuity and cybersecurity frameworks amid developments in the Middle East. First seen on…
AEO vs GEO vs AIO: What These Terms Actually Mean and Why Your Business Needs to Care

Mar 9, 2026 11:48 PM

Tags: business

A practitioner’s breakdown of AEO, GEO, and AIO. Learn where these terms originated, how they differ from traditional SEO, and how B2B companies use them to generate leads and grow revenue in 2026. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/aeo-vs-geo-vs-aio-what-these-terms-actually-mean-and-why-your-business-needs-to-care/