Tag: network
-
Top 10 Best External Attack Surface Management (EASM) Platforms 2026
In the sprawling digital ecosystem of 2026, organizations grapple with an increasingly complex and often poorly understood external attack surface. This attack surface encompasses all internet-facing assets that are discoverable and potentially exploitable by malicious actors. These assets extend far beyond traditional network perimeters to include cloud resources, web applications, APIs, orphaned infrastructure, exposed databases,…
-
Breach Roundup: Water Utilities in 12 US States Hit
Also, Chinese-Made SOHO Routers Contain Trojan, AI Fuels Cybercrime Across Africa. This week: water utilities in 12 U.S. states hit, Trojans in Chinese SOHO routers, banned Chinese companies in U.S. networks, AI fueled cybercrime in Africa, a U.K. police legal database breached, IBM Langflow AI flaw, a cyberattack delayed orders at a Dutch retailer and…
-
Palo Alto Networks Introduces PAN-OS 12.2 Ceres With AI Security Features
Palo Alto Networks has introduced PAN-OS 12.2 Ceres, a firewall operating system update that adds more than 55 innovations aimed at attacks accelerated by frontier AI. The release centers on Advanced Virtual Patching, Advanced IP Defense and six AI-powered Network Security Agents. Advanced Virtual Patching uses AI to identify unknown vulnerabilities and deliver network protections..…
-
Chinese telecom companies retain US network ties despite security concerns
First seen on scworld.com Jump to article: www.scworld.com/brief/chinese-telecom-companies-retain-u-s-network-ties-despite-security-concerns
-
A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide
For nearly two years, researcher Vangelis Stykas has maintained access to North Korean hackers’ servers. His work shows they pulled off intrusions in a shocking number of systems across the globe. First seen on wired.com Jump to article: www.wired.com/story/a-security-pro-hacked-north-korean-hackers-he-found-theyd-breached-hundreds-of-networks-worldwide/
-
How AI Agents Helped Seal Visa’s $2.4B BioCatch
Behavioral Biometrics Vendor Is Latest in Payment Network Sector Buying Spree. Visa, the world’s largest card payment network, is acquiring behavioral intelligence firm BioCatch in an all-cash deal valued at $2.4 billion. It’s the company’s largest acquisition to date and the latest in a string of payment sector M&As aimed at fraud and cybersecurity solutions.…
-
15 TP-Link Bugs Expose Risks in Zero-Trust Provisioning
Researchers are calling attention to the risks inherent in automated network device provisioning, using a world-leading device manufacturer as a case study. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/15-tp-link-bugs-risks-zero-trust-provisioning
-
Miggo Adds DefenseDepth Mitigation to Close Patch Gaps in Minutes
Miggo Security has announced Defense-in-Depth Mitigation, a capability that coordinates protections at the network edge and inside an application while a permanent patch is being prepared. The release was issued from Black Hat USA and says Miggo is presenting the capability in Las Vegas during the event. The approach gives security teams multiple mitigation points..…
-
OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes
OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligence (AI) chatbot ChatGPT to facilitate a wide range of investment, romance, gambling, and law enforcement impersonation schemes.To that end, it banned a coordinated network of ChatGPT accounts likely originating from Southeast Asia and operating from the city of Poipet, a region…
-
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
Two security flaws in Paperclip could let attackers execute commands on a network server or a developer’s computer. Paperclip is an open-source control plane for teams of artificial intelligence (AI) agents, and both paths rely on importing a malicious agent and starting it.A third flaw could expose sensitive data and control-plane details through application programming…
-
From Inspection to Authorization: Securing Networks for AI Agents
Tags: access, ai, api, business, ceo, cloud, communications, control, crowdstrike, cryptography, data, encryption, endpoint, finance, firewall, identity, infrastructure, login, network, office, risk, saas, service, usa, vpn<div cla An Industry Perspective By Rajiv Pimplaskar, CEO, Dispersive Holdings, Inc. Agentic AI changes the network security problem from inspection to authorization. As more traffic is generated by agents, models, and workloads operating at machine speed, the network has to make trust decisions continuously, evaluate policy in real time, revoke access automatically, and keep…
-
C5-Type-1-Testat des BSI bestätigt die Sicherheit von <> für Organisationen mit hohen Anforderungen an Cloud-Sicherheit
Extreme Networks gibt bekannt, dass <> das BSI-C5-Type-1-Testat nach dem Cloud-Computing-Compliance-Criteria-Catalogue (C5) des Bundesamts für Sicherheit in der Informationstechnik (BSI) erhalten hat. Damit erfüllt die branchenweit einzige KI-gestützte All-in-One-Cloud-Networking-Plattform einen der strengsten staatlich unterstützten Cloud-Sicherheitsstandards Europas. Das BSI-C5-Type-1-Testat bestätigt unabhängig, dass Extreme-Platform-One die Anforderungen an sichere und regelkonforme Cloud-Netzwerkinfrastrukturen für stark regulierte Organisationen erfüllt […] First…
-
Robin Sage 2.0: How LinkedIn Became a Counterintelligence Battlefield
Five Eyes governments warn that foreign intelligence services are using fake recruiters, professional networks and paid consulting offers to extract sensitive information. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/robin-sage-2-0-how-linkedin-became-a-counterintelligence-battlefield/
-
15 TP-Link Omada Flaws Exploit Zero-Touch Provisioning to Hijack Devices and Infiltrate Networks
Security researchers have disclosed 15 vulnerabilities in TP-Link’s Omada zero-touch provisioning (ZTP) ecosystem, which can be exploited to hijack devices, compromise controllers, expose credentials, and create access points into internal networks. The research, titled >>Zero Day Provisioning,<< was presented at Black Hat USA 2026 and focuses on weaknesses in the trust relationships that enable Omada…
-
TP-Link Zero-Touch Provisioning Flaws Could Expose Enterprise Networks, Warns Forescout
Forescout Vedere Labs research has uncovered 15 previously unknown vulnerabilities affecting TP-Link’s Omada Zero-Touch Provisioning (ZTP) ecosystem, warning that weaknesses in automated device deployment could allow attackers to compromise not just individual devices, but the management infrastructure responsible for entire networks. The research highlights an emerging security challenge as organisations increasingly rely on Zero-Touch Provisioning…
-
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer
Cybersecurity researchers have disclosed what has been described as a “long-standing supply chain attack” on QuickFox, a virtual private network (VPN) and network acceleration tool designed for overseas Chinese users.According to Fortinet FortiGuard Labs, the supply chain attack has been ongoing since at least August 2025 and involves a trojanized version of the application to…
-
Real User Monitoring und synthetische Tests – Palo Alto Networks will Embrace übernehmen
First seen on security-insider.de Jump to article: www.security-insider.de/palo-alto-networks-will-embrace-uebernehmen-a-d08ce157492a97c90d4191f980900624/
-
Zimperium Launches Deep Insights for Automated Mobile Forensics
Zimperium has announced Deep Insights, a mobile security product that combines real-time Mobile Threat Defense with automated mobile forensics. Deep Insights automates forensic analysis and reconstructs the sequence of events around a mobile incident. Zimperium said it correlates configuration changes, application activity, permission shifts and suspicious network traffic to build a step-by-step attack timeline. The..…
-
TP-Link patches Omada ZTP flaws allowing hackers to breach networks
TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that could be chained with previously disclosed flaws to achieve remote code execution (RCE). First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/tp-link-patches-omada-ztp-flaws-allowing-hackers-to-breach-networks/
-
Subscriber Security: Trust Is Telecom’s Most Valuable Asset
Why Protecting Subscriber Identity has Become Industry’s Cybersecurity Priority As subscriber identities become the foundation of digital services, telecom and DTH providers must move from protecting networks to safeguarding customer trust. Identity-centric security, stronger governance, AI-driven fraud detection and evolving regulations are reshaping cybersecurity priorities. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/blogs/subscriber-security-trust-telecoms-most-valuable-asset-p-4165
-
20 Cool New AI And Security Products At Black Hat 2026
Cool new AI and security products announced at Black Hat 2026 include AI-powered cybersecurity tools from vendors including Palo Alto Networks, SentinelOne and Abnormal AI. First seen on crn.com Jump to article: www.crn.com/news/security/2026/20-cool-new-ai-and-security-products-at-black-hat-2026
-
OpenAI Shuts Down ChatGPT Accounts Powering a Cambodia-Based Scam Factory
OpenAI has shut down a coordinated network of ChatGPT accounts that powered a Cambodia-based scam factory running multi-vector fraud and trafficking-linked operations, and has shared indicators with industry peers and authorities to make the network’s reconstitution significantly harder. Earlier in 2026, OpenAI’s threat intelligence team disrupted a scam syndicate that weaponized ChatGPT to drive investment,…
-
Russian Access Broker Sells Network Access to Ransomware Gangs While Spying on Ukraine
Tags: access, cyber, data-breach, defense, exploit, intelligence, network, ransomware, russia, ukraineAn exposed server linked to a Russian”‘speaking initial access broker (IAB) has revealed a sprawling operation that simultaneously fuels ransomware intrusions worldwide and supports Russian state-aligned intelligence collection against Ukrainian defense and aerospace targets. The artefacts show a mature, high”‘volume access brokerage pipeline that industrialises exploitation of internet”‘facing appliances, pivots to full Active Directory compromise,…
-
Barracuda Networks Shows How AI Agents Can Compromise Business Email
Barracuda Networks shows how attackers could hijack Microsoft Copilot to access sensitive emails, impersonate executives and execute convincing business email compromise attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/barracuda-networks-shows-how-ai-agents-can-compromise-business-email/
-
Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware
Midnight Blizzard, the Russian threat actor tied to the country’s foreign intelligence service, has spent months targeting users of public Wi-Fi networks at places like … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/04/midnight-blizzard-hotel-wi-fi-networks-hacking/
-
ChocoShell Steals Microsoft 365 Tokens and Browser Sessions From Travelers
ChocoShell is a PowerShell-based infostealer used in Microsoft’s newly disclosed “CaptiveCrunch” campaign to steal Microsoft 365 tokens, browser sessions, and Wi”‘Fi credentials from travelers connecting to compromised hospitality networks worldwide. The operation, dubbed “CaptiveCrunch,” poisons DNS and HTTP flows on guest networks so that travelers attempting to reach legitimate Microsoft 365 or update endpoints are…
-
Malware Can Steal Google’s Synced Passkeys Without Password or Fingerprint
Security researchers have revealed a series of attacks that could enable malware on a compromised Windows device to hijack accounts protected by Google-synced passkeys. This can occur without stealing a password, capturing a fingerprint, or requiring the victim to unlock their device. In research published on August 23, 2023, Palo Alto Networks’ Unit 42 detailed…
-
Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hotel-wi-fi-attacks-use-custom-malware-to-breach-microsoft-365-accounts/
-
Travelers Beware: Russian Intel Hacking Hotel Wi-Fi
Russian Intelligence Hackers Capture Captive Portals. Hackers are using hotel Wi-Fi networks across the United States, India and Saudi Arabia to steal credentials, exfiltrate data and spread malware onto personal devices, according to Microsoft and ReliaQuest. Microsoft’s threat intelligence arm began tracking the threat in early May. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/travelers-beware-russian-intel-hacking-hotel-wi-fi-a-32405
-
âš¡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than intended.Some of it was clever. Most of it was just access left lying around: old bugs, exposed gear, poisoned…