Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations

Threat hunters have called attention to a new campaign as part of which bad actors masqueraded as fake IT support to deliver the Havoc command-and-control (C2) ... Read More...

Building a High-Impact Tier 1: The 3 Steps CISOs Must Follow

Every CISO knows the uncomfortable truth about their Security Operations Center: the people most responsible for catching threats in real time are the people wi... Read More...

ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers

Three different ClickFix campaigns have been found to act as a delivery vector for the deployment of a macOS information stealer called MacSync. "Unlike traditi... Read More...

CISA Flags Apple Craft CMS Laravel Bugs in KEV Orders Patching by April 3 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added five security flaws impacting Apple, Craft CMS, and Laravel Livewire to its Kno... Read More...

Got a LinkedIn message from a recruiter? It might be Chinese intelligence warn FBI and MI5

If you've ever received an out-of-the-blue message via LinkedIn from a recruiter offering some well-paid consultancy work, intelligence agencies have a message ... Read More...

Canva uses 1Password to secure ID during growth phase

As it underwent a growth spurt in the early 2020s, graphic design platform Canva turned to 1Password to manage identity across its expanding organisation Read More...

Why the UK needs to rethink the Investigatory Powers Act and allow intercept evidence in court

The UK needs clear and unambiguous laws around the use of digital evidence in court. The law has become tangled following rulings in the country’s EncroChat pro... Read More...