Explore

Trendline Trendline
Operational Technology Security Faces Challenges in AI Integration

Operational Technology Security Faces Challenges in AI Integration

Operational Technology Security Faces Challenges in AI Integration
Rapid Read Rapid Read
FBI Warns of Kali365 Phishing Kit Targeting Microsoft 365 Users, Raising Cybersecurity Concerns

FBI Warns of Kali365 Phishing Kit Targeting Microsoft 365 Users, Raising Cybersecurity Concerns

The FBI has issued a warning about the Kali365 phishing-as-a-service platform, which is increasingly targeting Microsoft 365 users. This toolkit bypasses multi-factor authentication and exploits OAuth device code authorizations, allowing cybercriminals to gain access to Microsoft 365 accounts. The platform, which is distributed on Telegram, provides attackers with AI-generated phishing lures and automated campaign templates. It charges affiliates $250 for 30 days of service or $2,000 for a full year. Kali365 is part of a growing trend of device-code phishing tools that are becoming more popular due to their effectiveness in circumventing security controls. These tools allow attackers to impersonate users, steal data, and commit fraud without needing passwords or additional MFA requests.
Rapid Read Rapid Read
Iranian Hackers Breach US Gas Station Systems, Raising Infrastructure Concerns

Iranian Hackers Breach US Gas Station Systems, Raising Infrastructure Concerns

US officials have identified Iranian hackers as the culprits behind breaches in automatic tank gauge (ATG) systems at gas stations across multiple states. These systems, which monitor fuel levels in underground storage tanks, were compromised due to their lack of password protection. Although the hackers were able to alter display readings, they did not change the actual fuel volumes. The incident has raised alarms about the potential for such access to mask gas leaks or create other risks to critical infrastructure. The cybersecurity community has long warned about the vulnerabilities of exposed ATG systems.
Rapid Read Rapid Read
Bipartisan Lawmakers Criticize Cuts to Cybersecurity Agency CISA

Bipartisan Lawmakers Criticize Cuts to Cybersecurity Agency CISA

Lawmakers from both parties have expressed concern over significant budget cuts to the Cybersecurity and Infrastructure Security Agency (CISA), which they argue undermine the agency's ability to defend against foreign cyber threats. Representatives Don Bacon and James Walkinshaw highlighted the importance of CISA in protecting critical infrastructure and domestic networks during a panel discussion. The fiscal 2027 budget proposed by President Trump includes a reduction of up to $707 million for CISA, potentially leaving the agency with just over $2 billion in discretionary funding. The cuts have led to a reduction in personnel and resources, raising concerns about the agency's capacity to manage major cyber crises.
Trendline Trendline
New York State Issues Cybersecurity Guidance Amid Heightened Threats

New York State Issues Cybersecurity Guidance Amid Heightened Threats

New York State Issues Cybersecurity Guidance Amid Heightened Threats
Rapid Read Rapid Read
Iranian Hackers Target Aviation and Energy Sectors in Espionage Campaign

Iranian Hackers Target Aviation and Energy Sectors in Espionage Campaign

Iranian hackers have been targeting software engineers in the aviation and oil sectors as part of an espionage campaign during the ongoing conflict involving the US and Israel. According to cybersecurity researchers from Palo Alto Networks' Unit 42, the hackers have used fake job postings and infected video conferencing software to attempt to breach these industries. While no successful breaches of aviation or oil firms have been confirmed, the campaign highlights the lengths to which Tehran-linked hackers are willing to go to gather intelligence. The Aviation Information Sharing and Analysis Center has noted that such attacks were anticipated as a consequence of the war. The Iranian operatives have also targeted a US oil and gas firm, an Israeli defense contractor, and an organization in the UAE.
Rapid Read Rapid Read
Tech Giants Enhance Security Features to Combat Spyware Threats

Tech Giants Enhance Security Features to Combat Spyware Threats

Tech companies like Apple, Google, and Meta are enhancing security features to protect users from sophisticated spyware attacks. These attacks, often targeting journalists, human rights defenders, and political dissidents, use advanced tools to gain access to personal data on smartphones. In response, Apple has introduced Lockdown Mode, which restricts certain functionalities to enhance security. Google offers the Advanced Protection Program, which includes features like deep Gmail scans and Safe Browsing in Chrome. WhatsApp has also implemented Strict Account Settings to protect user privacy. These measures are designed to counteract the increasing threat of spyware, which can record calls, access messages, and track locations.
Rapid Read Rapid Read
Iranian Hackers Target U.S. Aviation and Oil Sectors in Espionage Scheme

Iranian Hackers Target U.S. Aviation and Oil Sectors in Espionage Scheme

Iranian hackers have been targeting software engineers in the aviation and oil sectors as part of an espionage campaign, according to cybersecurity researchers from Palo Alto Networks’ Unit 42. The hackers have used fake job postings and video conferencing software infected with malicious code to impersonate U.S. airlines and lure their targets. This effort is part of a broader campaign during the ongoing conflict between the U.S., Israel, and Iran. While the hackers have not successfully breached any aviation or oil firms, they may have compromised other targets globally. The campaign highlights the lengths to which Tehran-linked hackers are willing to go to gather intelligence that could aid the Iranian regime amidst U.S. and Israeli airstrikes.
Trendline Trendline
New York State Department of Financial Services Issues Cybersecurity Guidance Amid Heightened Threats

New York State Department of Financial Services Issues Cybersecurity Guidance Amid Heightened Threats

New York State Department of Financial Services Issues Cybersecurity Guidance Amid Heightened Threats
Trendline Trendline
Cisco Addresses Critical Security Flaw in Secure Workload Software

Cisco Addresses Critical Security Flaw in Secure Workload Software

Cisco Addresses Critical Security Flaw in Secure Workload Software
Trendline Trendline
Supply Chain Security Crisis: Increasing Vulnerabilities and Limited Visibility

Supply Chain Security Crisis: Increasing Vulnerabilities and Limited Visibility

Supply Chain Security Crisis: Increasing Vulnerabilities and Limited Visibility
Rapid Read Rapid Read
Supply Chain Security Faces Crisis with Rising Vulnerabilities and Limited Visibility

Supply Chain Security Faces Crisis with Rising Vulnerabilities and Limited Visibility

The global supply chain is experiencing a security crisis characterized by a rapid increase in vulnerabilities and a lack of visibility into these threats. According to a 2026 report by Black Kite, over 48,000 Common Vulnerabilities and Exposures (CVEs) were published in 2025, with the time to exploitation now occurring before patches are released. This situation highlights the challenge of maintaining security through patching alone. The report emphasizes the need for better visibility to identify and manage critical vulnerabilities effectively. The increasing use of artificial intelligence in discovering vulnerabilities and the rapid development of new applications contribute to the growing number of security threats. The report suggests that while AI can assist in defense, reliance on fully autonomous systems may be premature.