Category
4 articles
Generative AI didn't just make phishing emails better-written — it made them personal, scalable, and nearly impossible to catch with traditional filters. Security researchers are documenting a new generation of AI-assisted social engineering attacks that can clone communication styles, adapt in real time, and defeat the defenses most organizations have spent years building. This is what that looks like from the inside.
There's a thriving underground economy where a single undisclosed software flaw can fetch more than a luxury car — or a house. We dug into the murky world of zero-day trading to find out who's buying, who's selling, and what it means for every enterprise security team trying to keep the lights on.
Attackers have figured out that they don't need to break down your front door if they can slip something nasty into the lumber you're using to build it. Supply chain attacks targeting npm, PyPI, and other package ecosystems are skyrocketing — and most dev teams are flying blind.
Thousands of companies are unknowingly handing attackers the keys to their kingdom — and those keys are sitting right there in public GitHub repos. We dug into the scale of the problem, how automated scanners are exploiting it around the clock, and what your security team needs to do before someone else finds your secrets first.