Infosec stories - Page 28

Misconfigured cloud training labs on AWS, Google Cloud and Azure expose major firms to live attacks via overly permissive access roles.

Major firms are leaving known, actively exploited cyber flaws unpatched for six months or more, sharply heightening breach risks.

Politically themed LOTUSLITE phishing campaign hits US policy bodies, using DLL sideloading and espionage-focused backdoor tactics.

Bitdefender warns of a global surge in fake job emails posing as Amazon, Carrefour and the NHS, stealing data, money and account logins.

CrowdStrike cites a Forrester study claiming 273% ROI and USD $5m in three-year benefits from consolidating legacy endpoint security.

Rapid7 has launched a Microsoft-focused MDR service that fuses Defender telemetry with its SIEM and global SOC for unified threat response.

Check Point launches AI-ready Exposure Management suite to close remediation gaps as organisations leave half of known vulnerabilities unpatched.

Hybrid work fuels surge in device theft and visual hacking, as Kensington warns cheap physical locks could avert multimillion‑dollar breaches.

Gartner predicts half of organisations will adopt zero-trust data governance by 2028 as synthetic AI content undermines traditional data trust.

AI-fuelled cloud adoption is outpacing security teams, with Fortinet warning a widening 'complexity gap' leaves hybrid estates exposed.

Deutsche Telekom Security taps Akamai's certified service scheme to bolster API defences and microsegmentation for high‑risk sectors.

Attackers are abusing LinkedIn private messages to deliver Python-based malware via booby-trapped archives, ReliaQuest has warned.

AI-powered attacks and defences, quantum threats and smart city risks are set to transform Australia's cyber security landscape by 2026.

Boards face a widening cyber visibility gap as AI, legacy systems and shadow tools outpace governance, testing resilience and oversight.

Check Point sets out a runtime security blueprint for AI factories as enterprises scale GPU-heavy data centres and face mounting GenAI attacks.

Australia's Essential Eight has become the cyber benchmark, but clinging to basic compliance leaves organisations exposed to identity-led threats.

Attackers are already exploiting AI agents, extracting hidden prompts, bypassing safety checks and abusing tools tied to data and systems.

CoreView launches Tenant Resilience and Tenant Management to tackle rising Microsoft 365 tenant-level attacks and configuration risks.

Cobalt debuts a two-way penetration testing integration for Microsoft Teams, promising faster remediation and real-time security collaboration.

Rubrik launches CXO Visionaries, an invitation-only network for cyber and AI leaders as identity-driven attacks and recovery fears intensify.