Security News

Inside MITRE ATT&CK v17: Smarter defenses, sharper threat intel
2025-05-19 04:00

In this Help Net Security video, Adam Pennington, MITRE ATT&CK Lead, breaks down what’s new in the ATT&CK v17 release. He highlights the addition of the ESXi platform, new and updated techniques...

5 BCDR Essentials for Effective Ransomware Defense
2025-05-15 10:30

Ransomware has evolved into a deceptive, highly coordinated and dangerously sophisticated threat capable of crippling organizations of any size. Cybercriminals now exploit even legitimate IT tools...

Intel's data-leaking Spectre defenses scared off yet again
2025-05-13 21:15

ETH Zurich boffins exploit branch prediction race condition to steal info from memory, fixes have mild perf hit Researchers at ETH Zurich in Switzerland have found a way around Intel's defenses...

Deepfake Defense in the Age of AI
2025-05-13 11:00

The cybersecurity landscape has been dramatically reshaped by the advent of generative AI. Attackers now leverage large language models (LLMs) to impersonate trusted individuals and automate these...

Week in review: The impact of a CVE-free future on cyber defense, Patch Tuesday forecast
2025-05-11 08:00

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What a future without CVEs means for cyber defense For many cybersecurity professionals, the CVE...

What a future without CVEs means for cyber defense
2025-05-06 08:18

The importance of the MITRE-run Common Vulnerabilities and Exposures (CVE) Program shouldn’t be understated. For 25 years, it has acted as the point of reference for cybersecurity professionals to...

Researchers Demonstrate How MCP Prompt Injection Can Be Used for Both Attack and Defense
2025-04-30 15:59

As the field of artificial intelligence (AI) continues to evolve at a rapid pace, new research has found how techniques that render the Model Context Protocol (MCP) susceptible to prompt injection...

Exposure validation emerges as critical cyber defense component
2025-04-25 05:00

Organizations have implemented various aspects of threat exposure validation, including security control validation (51%) and filtering threat exposures based on the effectiveness of security...

Skyhawk Security brings preemptive cloud app defense to RSAC 2025
2025-04-24 11:21

Skyhawk Security is adding new protection for custom-built cloud applications. The company announced the update to its AI-powered Autonomous Purple Team for RSAC 2025 Conference, which starts...

America's cyber defenses are being dismantled from the inside
2025-04-23 08:27

The CVE system nearly dying shows that someone has lost the plot Opinion We almost lost the Common Vulnerabilities and Exposures (CVE) database system, but that's only the tip of the iceberg of...