Study: Passkeys Can Be More Dangerous Than Passwords in Cases of Account Abuse
A US study shows many people can't recognize or remove maliciously added passkeys, which can make passkeys more dangerous than passwords in account takeover sc…
Cybersecurity & Protection
All articles in the "Cybersecurity & Protection" category.
Digital Resilience: Why Backups and Security Alone Aren't Enough
Internet outages halt digital business processes within a short time. Digital resilience needs more than backups and IT security, geo-redundancy and automatic …
Fortinet Closes Flaws in FortiWeb, FortiManager, and FortiClient
Fortinet closes several security flaws in FortiWeb, FortiManager, and FortiClientWindows that, in the worst case, could have given attackers administrator acce…
US Allows Vetted Companies to Conduct Offensive Cyber Operations Against Criminals
A memorandum from US President Trump allows vetted companies to conduct offensive cyber operations against foreign criminal groups under government oversight.
Metabase Zero-Day Actively Exploited: Attackers Accessed Customer Data
A zero-day flaw in Metabase (CVE-2026-72898, CVSS 10.0) was actively exploited, with attackers accessing customer data including from notebook maker Framework.
Five Layers, One Problem: Why Real AI Security Takes More Than One Tool
AI risk in companies isn't one problem but five: employees, developers, in-house models, autonomous agents, and missing visibility, each with its own attack su…
Apple Warns Users in 110 Countries About Spyware Attacks
Apple has warned users in 110 countries about possible spyware infections, including state-sponsored tools like Pegasus. How to respond to such a warning.
LiteLLM Supply Chain Attack Hit More Than 2,500 Companies
A supply chain attack on LiteLLM via compromised PyPI packages hit more than 2,500 companies and 434,000 build pipelines, even though the packages were online …
Cisco Secure Firewall: Attackers Reboot ASA and FTD Through the SSL VPN
One crafted HTTP request is enough to reboot Cisco ASA and FTD devices. The flaw is under active exploitation and sits in CISA's KEV catalogue.