Proton Mail now offers post-quantum encryption as an optional feature, helping users protect emails against future quantum computing threats.
What broke, who is behind it, and what to do next.
Spain is becoming a European cyber powerhouse. With a projected €3 billion market valuation by year-end, the surge is fueled by mandatory EU compliance—and a desperate race to find qualified professionals.
The line between hacktivism and extortion is blurring. The "Forbidden Hyena" group is now using AI-generated PowerShell scripts to deploy the BlackReaperRAT, a stealthy new Trojan capable of total system takeover.
The "Gold Standard" of South Korean cybersecurity is being questioned. After several ISMS-P certified firms suffered massive data leaks, the Ministry of Science and ICT has announced a shift to a "Technology-Centered" audit model to restore public trust.
The Ministry of Industry and Information Technology (MIIT) has issued an urgent warning against the open-source AI agent OpenClaw. Due to severe "default configuration" risks and hijacking flaws, government agencies and major banks have been ordered to restrict its use.
In a major operation across Istanbul, the Cyber Crime Unit arrested 140 suspects involved in a sophisticated international Forex fraud ring targeting global investors.
Ukraine’s Ministry of Defense reports that the DELTA situational awareness system successfully passed a rigorous two-month cybersecurity assessment, ensuring the safety of military data and personnel.
Go deeper on cyber intelligence, geopolitics, the human factor and the threats still taking shape.
The era of theoretical AI risk is over. Mandiant’s latest research reveals how threat actors are moving from experimentation to execution—and why your defense needs a reality check.
High fences can't stop a drone. Discover how "aerial payloads" are bypassing traditional perimeters to hack networks and eavesdrop on corporate offices.
A Chinese state-sponsored group compromised Notepad++'s hosting infrastructure from June through December 2025, intercepting update traffic to push malicious installers to targeted users.
Strategic move gives Westcon-Comstor a presence in the region, providing a platform for accelerated growth and shared success.
An 15-year criminal investigation has led to 34 arrests in Spain. Linked to the global Black Axe organization, the group is accused of causing nearly €6 million in total damages through various fraudulent activities.
New comprehensive research from Absolute Security exposes a "recovery reality gap." With 0% of organizations achieving sub-24-hour recovery, the industry is shifting focus from detecting threats to the speed of restoring business operations.
With the World Economic Forum approaching, the NCSC is warning of a surge in cyber disruptions. From DDoS attacks to credential theft, here are the essential steps the Swiss government recommends for maintaining digital resilience.
Kowa Emori, a Japanese chemical and electronics materials trading company, disclosed a ransomware attack on January 7, 2026, that knocked out email systems and caused delays in order processing and shipments to customers.
From React2Shell's perfect CVSS 10.0 score to the first autonomous AI cyberattack, 2025 pushed cybersecurity to its limits. This comprehensive analysis covers the top 10 breaches, critical vulnerabilities, why ransomware economics is slowly collapsing and big LEA operations against cybercriminals.
Automated code generation introduces critical security gaps. Learn why human expertise remains essential for identifying vulnerabilities in machine-written code.
Germany's BSI revises quantum computing study, estimating crypto-breaking devices by 2040 amid error correction progress. It warns of 'store now, decrypt later' threats and urges quantum-resistant encryption for data protection.
A five-month spearphishing operation has transformed the npm registry into a durable hosting layer for AiTM credential theft, specifically targeting sales teams in the manufacturing and healthcare industries.
Nissan Motor Co. confirms a data breach affecting 21,000 customers in Japan following a security incident at third-party vendor Red Hat. No financial data was stolen.
Swiss Federal Council reviews AI's impact on cybersecurity, from phishing risks to threat detection benefits, updating NCS for transparency.
As endpoint detection matures, attackers have moved "down the stack." Discover why hypervisor breaches have tripled in late 2025 and how to bridge the visibility gap.
The Handala hacking group claims to have exposed 14 Israeli engineers working on drone programs, offering $30,000 rewards for each. The threats follow attacks on politicians including Bennett, whose Telegram was compromised. Israeli security sources haven't verified the claims.
Seven years after its debut, the National Cybersecurity Strategy (NCS) Guide enters its 3rd edition. This 2025 update marks a pivotal shift from "planning" to "sustainable execution," introducing new mandates for funding and resource management.
A sophisticated threat actor with possible links to Russian hybrid-threat groups impersonated Trend Micro security advisories to target defense contractors, energy companies, and cybersecurity firms. The attack chain was stopped before final payload deployment.
Chinese threat actor UAT-9686 deploys AquaShell backdoor on Cisco Secure Email Gateway appliances with custom persistence.
Zscaler documents BlindEagle APT's attack on Colombian government using steganography and dual RAT deployment in September 2025.
Red Hat acquires Chatterbox Labs to integrate model-agnostic AI safety testing and guardrails into enterprise AI platform.
Security researchers discover 17 Firefox extensions using PNG steganography to hide multi-stage malware affecting 50,000+ users.
Learn how to weaponize dorks for red teaming or automate perimeter defense.
ASPI exposes how Chinese LLMs systematically censor images and text while AI powers mass surveillance across justice systems.
New ReliaQuest research reveals IAB Storm-0249 is sideloading malicious DLLs via legitimate EDR processes to evade detection.
ESET uncovers PromptLock, first AI-driven ransomware, as cyber threats evolve rapidly. CloudEyE surges 30x while ransomware victims jump 40%.
Join JPCERT/CC at JSAC2026 in Tokyo (Jan 22-23) for free, deep technical sessions on incident response, APTs (Earth Kurma, Stately Taurus), RapperBot analysis, and advanced malware forensics. Essential for security analysts.
ISC2 study reveals 88% of organizations faced security incidents due to skills gaps. Analysis of workforce challenges and AI impact.
Censys research reveals DDoSia control servers last avg 2.5 days, with 6 active at any time. Analysis of pro-Russian DDoS infrastructure.
In‑depth analysis of recent Medusa ransomware group operations, victim data and extortion schemes.
Kali Linux 2025.4 improves desktop usability, VM support, and tooling. Key changes include Wayland enhancements and distribution adjustments.
Arkime captures and indexes network traffic so teams can search, review, and understand activity across large environments.
ENISA secures €36M to operate EU Cybersecurity Reserve, providing emergency incident response for critical sectors under Cyber Solidarity Act.
Proofpoint completes $1.8B acquisition of Hornetsecurity, expanding Microsoft 365 security reach to 125,000+ SMB customers via MSPs.
Proton launches Sheets, an end-to-end encrypted spreadsheet alternative to Excel and Google Sheets, free for Proton Drive users.
Chinese threat actor WARP PANDA exploits VMware vCenter vulnerabilities, deploys custom malware, and maintains persistent cloud access.
