Tag: corporate

Proton trains new service to expose corporate infosec cover-ups

Oct 30, 2025 8:19 PM

Tags: corporate, infosec, service

Service will tell on compromised organizations, even if they didn’t plan on doing so themselves First seen on theregister.com Jump to article: www.theregister.com/2025/10/30/proton_data_breach_observatory/
Typo hackers sneak cross-platform credential stealer into 10 npm packages

Oct 30, 2025 4:19 PM

Tags: attack, captcha, cloud, corporate, credentials, data, email, espionage, hacker, linux, macOS, malicious, password, router, supply-chain, theft, threat

Payload for IP fingerprinting and credential theft: Once the fake CAPTCHA interaction occurs, the installer sends the victim’s IP address to the attacker’s server, a step that allows tracking, geofencing, and exclusion of unwanted targets.It then downloads the payload from the same host, which is a 24 MB Pyinstaller-packed application that contains hundreds of thousands…
Tips for CISOs switching between industries

Oct 30, 2025 4:19 PM

Tags: breach, ceo, ciso, corporate, country, cyber, cybersecurity, data, data-breach, defense, finance, healthcare, identity, jobs, law, mobile, office, risk, service, skills

Understand and demonstrate achieved results: Making the jump into a new industry isn’t about matching past job titles but about proving you can create impact in a new context. DiMarco says the key is to demonstrate relevance early.”When I pitch a candidate, I explain what they did, how they did it, and what their impact…
Hackers Hijack Corporate XWiki Servers for Crypto Mining

Oct 29, 2025 6:27 PM

Tags: attack, corporate, crypto, cve, exploit, flaw, hacker

Hackers exploit critical XWiki flaw CVE-2025-24893 to hijack corporate servers for cryptomining, with active attacks confirmed by VulnCheck researchers. First seen on hackread.com Jump to article: hackread.com/hackers-hijack-xwiki-servers-crypto-mining/
Hackers Hijack Corporate XWiki Servers for Crypto Mining

Oct 29, 2025 6:27 PM

Tags: attack, corporate, crypto, cve, exploit, flaw, hacker

Hackers exploit critical XWiki flaw CVE-2025-24893 to hijack corporate servers for cryptomining, with active attacks confirmed by VulnCheck researchers. First seen on hackread.com Jump to article: hackread.com/hackers-hijack-xwiki-servers-crypto-mining/
Hackers Hijack Corporate XWiki Servers for Crypto Mining

Oct 29, 2025 6:27 PM

Tags: attack, corporate, crypto, cve, exploit, flaw, hacker

Hackers exploit critical XWiki flaw CVE-2025-24893 to hijack corporate servers for cryptomining, with active attacks confirmed by VulnCheck researchers. First seen on hackread.com Jump to article: hackread.com/hackers-hijack-xwiki-servers-crypto-mining/
AI adoption outpaces corporate governance, security controls

Oct 29, 2025 5:26 PM

Tags: ai, business, control, corporate, governance

Security and business leaders warn that companies are accelerating their use of agentic AI beyond the ability to maintain proper guardrails.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-corporate-governance-security-controls/804087/
Security for AI: A Practical Guide to Enforcing Your AI Acceptable Use Policy

Oct 28, 2025 8:26 PM

Tags: access, ai, awareness, best-practice, business, chatgpt, compliance, control, corporate, data, data-breach, disinformation, finance, governance, government, guide, intelligence, LLM, malicious, monitoring, openai, privacy, regulation, risk, service, strategy, technology, threat, tool, training, update, vulnerability

An AI acceptable use policy can help your organization mitigate the risk of employees accidentally exposing sensitive data to public AI tools. Benchmark your organization’s policy against our best practices and discover how prompt-level visibility from Tenable AI Exposure eases policy enforcement. Key takeaways: An AI acceptable use policy governs the appropriate use of generative…
Copilot diagrams could leak corporate emails via indirect prompt injection

Oct 28, 2025 2:26 PM

Tags: ai, attack, corporate, data, email, injection, leak, malicious, risk, threat, tool

The bigger threat of indirect prompt injection: The incident underscores that the risk goes beyond simple “prompt injection,” where a user types malicious instructions directly into an AI. Here, the attacker hides instructions inside document content that gets passed into the assistant without the user’s awareness. Logue described how the hidden instructions use progressive task…
Copilot diagrams could leak corporate emails via indirect prompt injection

Oct 28, 2025 2:26 PM

Tags: ai, attack, corporate, data, email, injection, leak, malicious, risk, threat, tool

The bigger threat of indirect prompt injection: The incident underscores that the risk goes beyond simple “prompt injection,” where a user types malicious instructions directly into an AI. Here, the attacker hides instructions inside document content that gets passed into the assistant without the user’s awareness. Logue described how the hidden instructions use progressive task…
Step aside, SOC. It’s time to ROC

Oct 28, 2025 11:26 AM

Tags: attack, breach, business, communications, corporate, cyber, cybersecurity, data, defense, exploit, finance, framework, government, infrastructure, insurance, intelligence, military, monitoring, network, resilience, risk, risk-assessment, soc, strategy, threat, vpn, vulnerability, zero-day

What is a ROC?: At its core, the Resilience Risk Operations Center (ROC) is a proactive intelligence hub. Think of it as a fusion center in which cyber, business and financial risk come together to form one clear picture.While the idea of a ROC isn’t entirely new, versions of it have existed across government and…
Step aside, SOC. It’s time to ROC

Oct 28, 2025 11:26 AM

Tags: attack, breach, business, communications, corporate, cyber, cybersecurity, data, defense, exploit, finance, framework, government, infrastructure, insurance, intelligence, military, monitoring, network, resilience, risk, risk-assessment, soc, strategy, threat, vpn, vulnerability, zero-day

What is a ROC?: At its core, the Resilience Risk Operations Center (ROC) is a proactive intelligence hub. Think of it as a fusion center in which cyber, business and financial risk come together to form one clear picture.While the idea of a ROC isn’t entirely new, versions of it have existed across government and…
Do CISOs need to rethink service provider risk?

Oct 28, 2025 9:26 AM

Tags: access, ai, breach, ciso, compliance, control, corporate, cyber, cybersecurity, data, framework, governance, group, guide, incident, incident response, ISO-27001, penetration-testing, risk, risk-assessment, risk-management, service, soc, technology, threat, tool, training, update, vulnerability

Should risk assessment be about questionnaires or conversation?: David Stockdale, director of cybersecurity at the University of Queensland (UQ), needs services providers to understand the make-up and complexity of a higher education institution.”Because of the size and research intensity of the university, we tend to build a lot in-house. Where we do use service providers,…
Do CISOs need to rethink service provider risk?

Oct 28, 2025 9:26 AM

Tags: access, ai, breach, ciso, compliance, control, corporate, cyber, cybersecurity, data, framework, governance, group, guide, incident, incident response, ISO-27001, penetration-testing, risk, risk-assessment, risk-management, service, soc, technology, threat, tool, training, update, vulnerability

Should risk assessment be about questionnaires or conversation?: David Stockdale, director of cybersecurity at the University of Queensland (UQ), needs services providers to understand the make-up and complexity of a higher education institution.”Because of the size and research intensity of the university, we tend to build a lot in-house. Where we do use service providers,…
OpenAI goes after Microsoft 365 Copilot’s lunch with ‘company knowledge’ feature

Oct 26, 2025 2:26 PM

Tags: chatgpt, corporate, microsoft, openai

ChatGPT can now rummage through corporate files via connectors, though Redmond still has the deeper hooks First seen on theregister.com Jump to article: www.theregister.com/2025/10/24/openai_chatgpt_company_knowledge/
Scammers try to trick LastPass users into giving up credentials by telling them they’re dead

Oct 25, 2025 5:26 AM

Tags: access, advisory, authentication, breach, corporate, credentials, crypto, cybercrime, email, google, group, infosec, intelligence, login, mail, malicious, mfa, mitigation, password, phishing, phone, scam, social-engineering, threat

Staff should be using MFA: CSOs and IT managers should ensure that any password managers their employees use have phishing-resistant multifactor authentication or require an additional login factor, so if staff fall for a scam like this, the scammer can’t log in just using stolen credentials, Grimes said.If the corporate approved password manager doesn’t allow…
Google Warns of Cybercriminals Using Fake Job Postings to Spread Malware and Steal Credentials

Oct 24, 2025 2:26 PM

Tags: corporate, credentials, cyber, cybercrime, google, group, intelligence, jobs, malware, social-engineering, threat

Google’s Threat Intelligence Group (GTIG) has uncovered a sophisticated social engineering campaign orchestrated by financially motivated threat actors based in Vietnam. The ultimate objective is to compromise corporate advertising accounts and steal valuable credentials for resale or direct monetization. The threat cluster specifically targets remote workers in digital advertising roles, focusing on individuals with contract…
Hackers Steal Microsoft Teams Chats Emails by Grabbing Access Tokens

Oct 24, 2025 8:26 AM

Tags: access, attack, breach, communications, corporate, cyber, email, hacker, microsoft, risk, unauthorized

Security researchers have discovered a sophisticated method that allows attackers to steal access tokens from Microsoft Teams, potentially granting unauthorized access to sensitive corporate communications, emails, and SharePoint documents. The attack vector represents a significant security risk for organizations relying on Microsoft’s productivity suite, as stolen tokens can be weaponized for lateral movement within company…
Hackers Steal Microsoft Teams Chats Emails by Grabbing Access Tokens

Oct 24, 2025 8:26 AM

Tags: access, attack, breach, communications, corporate, cyber, email, hacker, microsoft, risk, unauthorized

Security researchers have discovered a sophisticated method that allows attackers to steal access tokens from Microsoft Teams, potentially granting unauthorized access to sensitive corporate communications, emails, and SharePoint documents. The attack vector represents a significant security risk for organizations relying on Microsoft’s productivity suite, as stolen tokens can be weaponized for lateral movement within company…
Manipulating the meeting notetaker: The rise of AI summarization optimization

Oct 23, 2025 10:26 AM

Tags: access, ai, corporate, defense, detection, guide, risk, risk-assessment, strategy, supply-chain, tool, vulnerability

“The main factor in last quarter’s delay was supply chain disruption.””The key outcome was overwhelmingly positive client feedback.””Our takeaway here is in alignment moving forward.””What matters here is the efficiency gains, not the temporary cost overrun.”The techniques are subtle. They employ high-signal phrases such as “key takeaway” and “action item,” keep statements short and clear,…
Manipulating the meeting notetaker: The rise of AI summarization optimization

Oct 23, 2025 10:26 AM

Tags: access, ai, corporate, defense, detection, guide, risk, risk-assessment, strategy, supply-chain, tool, vulnerability

“The main factor in last quarter’s delay was supply chain disruption.””The key outcome was overwhelmingly positive client feedback.””Our takeaway here is in alignment moving forward.””What matters here is the efficiency gains, not the temporary cost overrun.”The techniques are subtle. They employ high-signal phrases such as “key takeaway” and “action item,” keep statements short and clear,…
From Firewalls to Zero Trust: 10 Best Practices for Next-Gen Business Data Security

Oct 22, 2025 11:26 AM

Tags: 2fa, access, attack, authentication, automation, best-practice, breach, business, compliance, control, corporate, credentials, cyber, cyberattack, cybersecurity, data, detection, endpoint, firewall, flaw, insurance, ISO-27001, least-privilege, mfa, mobile, monitoring, network, privacy, ransomware, regulation, risk, sql, strategy, theft, threat, tool, unauthorized, zero-trust

In today’s ever-evolving digital landscape, businesses must establish robust data security strategies to safeguard sensitive information from modern threats. The reality of escalating cyberattacks, such as the rise in ransomware and data breaches, has spotlighted the need for comprehensive, layered data security measures. Here are ten strategic steps to reinforce data security effectively: TABLE OF…
CAASM and EASM: Top 12 attack surface discovery and management tools

Oct 22, 2025 10:26 AM

Tags: access, ai, api, attack, automation, blockchain, business, cloud, control, corporate, credentials, cyber, cybersecurity, dark-web, data, data-breach, detection, dns, endpoint, exploit, framework, guide, hacking, HIPAA, incident response, infrastructure, intelligence, Internet, leak, marketplace, microsoft, monitoring, network, open-source, PCI, risk, risk-assessment, service, soc, software, supply-chain, technology, threat, tool, update, vulnerability

CAASM and EASM tools for attack surface discovery and management: Periodic scans of the network are no longer sufficient for maintaining a hardened attack surface. Continuous monitoring for new assets and configuration drift are critical to ensure the security of corporate resources and customer data.New assets need to be identified and incorporated into the monitoring…
AI-enabled ransomware attacks: CISO’s top security concern, with good reason

Oct 21, 2025 3:26 PM

Tags: access, ai, attack, ciso, corporate, crowdstrike, data, deep-fake, detection, email, encryption, extortion, group, infection, malware, phishing, ransomware, service, threat

Ransomware’s AI-powered future: Although CrowdStrike’s latest survey doesn’t provide a full picture of AI’s use by ransomware gangs, the fact that generative AI is proving highly effective in crafting phishing emails that lead to ransomware infections shows the tip of the iceberg CISOs face.CrowdStrike Field CTO Cristian Rodriguez tells CSO, “We’re seeing AI touch every…
Is Your Car a BYOD Risk? Researchers Demonstrate How

Oct 20, 2025 11:40 PM

Tags: attack, corporate, network, phone, risk

If an employee’s phone connects to their car and then their corporate network, an attack against the car can reach the company. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/car-byod-risk
Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

Oct 20, 2025 9:40 AM

Tags: access, attack, authentication, breach, china, control, corporate, cve, cyber, cybercrime, cybersecurity, data, defense, exploit, flaw, framework, government, group, hacker, identity, infrastructure, intelligence, Intruder, korea, microsoft, monitoring, network, ransomware, reverse-engineering, risk, russia, supply-chain, tactics, technology, theft, threat, vulnerability, zero-day, zero-trust

China or Russia? Conflicting attribution: Microsoft attributed the broader wave of SharePoint exploitations to three Chinese-linked groups: Linen Typhoon, Violet Typhoon, and a third actor it tracks as Storm-2603. The company said the attackers were preparing to deploy Warlock ransomware across affected systems.However, the source familiar with the Kansas City incident tells CSO that a…
Cybersecurity Snapshot: F5 Breach Prompts Urgent U.S. Gov’t Warning, as OpenAI Details Disrupted ChatGPT Abuses

Oct 17, 2025 11:07 PM

Tags: ai, attack, awareness, backdoor, breach, business, chatgpt, china, cisa, cloud, control, corporate, cve, cyber, cybersecurity, data, data-breach, defense, detection, exploit, framework, fraud, governance, government, group, hacker, incident, infrastructure, Internet, iran, law, LLM, malicious, malware, mitigation, monitoring, network, openai, organized, phishing, privacy, resilience, risk, russia, scam, security-incident, service, software, strategy, supply-chain, technology, threat, training, update, vulnerability

F5’s breach triggers a CISA emergency directive, as Tenable calls it “a five-alarm fire” that requires urgent action. Meanwhile, OpenAI details how attackers try to misuse ChatGPT. Plus, boards are increasing AI and cyber disclosures. And much more! Key takeaways A critical breach at cybersecurity firm F5, attributed to a nation-state, has triggered an urgent…
TDL 007 – Cyber Warriors Digital Shadows: Insights from Canada’s Cybersecurity Leader

Oct 17, 2025 9:07 PM

Tags: ai, awareness, backup, breach, browser, business, cio, ciso, communications, conference, control, corporate, country, cryptography, cyber, cybersecurity, dark-web, data, data-breach, defense, dns, email, encryption, finance, government, healthcare, identity, incident, infrastructure, intelligence, Internet, jobs, law, leak, linux, malicious, mfa, mitigation, network, organized, phone, privacy, ransom, ransomware, RedTeam, resilience, risk, risk-management, router, service, startup, strategy, supply-chain, switch, tactics, technology, theft, threat, tool, training, windows

Summary In this episode of The Defender’s Log, host David Redekop interviews Sami Khoury, the Senior Official for Cybersecurity for the Government of Canada. With a career spanning 33 years at the Communication Security Establishment (CSE), Khoury shares how a coincidental job application blossomed into a lifelong passion for national security. Khoury emphasizes that modern…
AI Agent Security: Whose Responsibility Is It?

Oct 17, 2025 8:07 PM

Tags: ai, awareness, cloud, corporate, cybersecurity, data, service

The shared responsibility model of data security, familiar from cloud deployments, is key to agentic services, but cybersecurity teams and corporate users often struggle with awareness and managing that risk. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/ai-agent-security-awareness-responsibility
Attackers Exploit Zendesk Authentication Issue to Flood Targets’ Inboxes with Corporate Notifications

Oct 17, 2025 4:07 PM

Tags: authentication, corporate, cyber, cybercrime, email, exploit, service

Cybercriminals have discovered a gap in Zendesk’s ticket submission process and are using it to bombard victims with waves of misleading support messages. When configured to accept anonymous requests, however, the service can be abused to generate email floods that appear to come from legitimate corporate domains. Earlier this week, security blogger Brian Krebs was…