Category: Security

Security researchers at Cato Networks have documented a technique called HashJack that allows attackers to embed hidden instructions inside URLs and have those instructions executed silently by AI-assisted browsers. The mechanism is a fragment identifier, the portion of a URL that follows the hashtag symbol, a component that web servers never process and that traditional […]

Continue Reading

The calendar application sitting at the center of your workday has become an active target for a category of attack that most organizations have not incorporated into their threat awareness. Security researchers have identified a pattern of abuse targeting calendar subscription features in Google Calendar, Outlook, and Apple Calendar, where malicious events appear directly in […]

Continue Reading

ShinyHunters went after Checkout.com, expecting the same outcome they usually get. Panic, lawyers, a quiet settlement, and a payday. What they got instead was a public pledge to fund independent cybercrime research with the money that would have gone to them. The response is worth studying carefully because it changes the calculus on how businesses […]

Continue Reading

Fulgar has been supplying premium fiber to some of the most recognized names in apparel since 1976. When RansomHouse added the Italian textile manufacturer to their dark web leak site, the breach stopped being a single company’s problem and became a warning for every brand that depends on a supplier network to keep products moving. […]

Continue Reading

The Everest ransomware group just made headlines by posting a threat notice on their dark web leak site claiming they walked away from Under Armour with roughly 343 gigabytes of internal data. Personal documents tied to clients and employees. Sensitive internal records. And to make their point impossible to ignore, they posted samples as proof […]

Continue Reading

There’s a deeply unsettling assumption built into most corporate security strategies. It goes something like this: the antivirus is on our side. Whatever else might go wrong, the protection software is trustworthy by definition. Researchers at Google’s Mandiant and Threat Intelligence Group just dismantled that assumption in the most uncomfortable way possible, uncovering an attack […]

Continue Reading

Most business owners sleep a little easier knowing they’ve invested in firewalls, endpoint protection, and data loss prevention tools. That investment is worthwhile, but a newly released report suggests it’s leaving a significant and largely unguarded attack surface wide open. The Browser Security Report 2025 from LayerX reveals that the browser sitting on every employee’s […]

Continue Reading