Cybersecurity

Taming Shadow AI: Closing the Context Gap in Enterprise AI Security

Shadow AI exposes sensitive enterprise data when employees use unsanctioned AI tools. Context-aware guardrails can reduce leakage and false positives by combining deterministic rules, contextual inspection, graduated enforcement and centralized observability. more

Why Container Security Is Still Fighting Yesterday’s Battle

Rule-based container security can miss attacks that evade predefined patterns, prompting an argument for behavioral detection that models activity across Kubernetes workloads and control planes while retaining rules for known threats. more

UK, US and Dutch Agencies Expose Iranian Spyware Targeting Dissidents and Journalists

UK, US and Dutch agencies have exposed Iranian state-linked spyware that uses personalized social engineering to compromise Windows devices and surveil dissidents, activists and journalists, capturing communications, files, audio and other sensitive data. more

Two Years After His Arrest, Pavel Durov Wants to Run His Own Registry

Telegram says it has applied for .gram, potentially giving a billion users DNS addresses while putting its governance, abuse controls, legal exposure and infrastructure under scrutiny as ICANN prepares to reveal applications. more

Cyberattackers Are Using AI Across More of the Kill Chain, Anthropic Reports

Anthropic says attackers are increasingly using AI agents to orchestrate cyber operations, automating reconnaissance, exploitation, data theft and malware adaptation while lowering the expertise and resources previously required for sophisticated attacks. more

How Domain Abuse, Social Media, and AI Fuel Brand Attacks

CISOs expect social media impersonation to become their leading cybersecurity threat as attackers increasingly combine AI-enabled deception, executive impersonation, and domain abuse across multiple channels to conduct fraud and steal sensitive information. more

Building Digital Operations Across Borders: Regulation, Security & Internet Governance

Building a technology operation in India showed that regulation, governance, security, people and technology work best as one operating environment, with compliance, access controls and local autonomy designed in from the outset. more

G7 Cyber Agencies Urge Immediate Post-Quantum Migration Planning

G7 cybersecurity agencies are pressing governments and organizations to inventory cryptographic dependencies and accelerate post-quantum migration as long transition timelines and future quantum attacks threaten Internet security infrastructure. more

International Operation Disrupts Sality Botnet After More Than Two Decades

Authorities disrupted the decades-old Sality botnet by targeting its decentralized peer-to-peer network and supporting domains, cutting infected machines off from malicious payloads while beginning the longer task of identifying and remediating compromised systems. more

From Forgotten to Exploited: How AI Changes the Dangling DNS Threat

Dangling DNS records can expose trusted corporate subdomains to takeover, while AI-assisted reconnaissance makes abandoned resources easier to find, increasing the need for continuous DNS monitoring rather than periodic audits. more

FulcrumSec Claims 86 GB Data Theft in Manchester Airports Breach

FulcrumSec claims it stole 86 GB from Manchester Airports Group, including detailed booking and travel data, while the operator has confirmed a breach but not the group's account of its scale or method. more

Digital Embassies: Could Africa Rethink Digital Sovereignty?

Estonia's data embassy model offers African governments a different approach to digital sovereignty, combining cross-border infrastructure, legal safeguards and geographic redundancy to keep critical state systems secure, recoverable and operational during major disruptions. more

ICANN Terminates Two Registrars as DNS Abuse and Compliance Failures Escalate

ICANN has terminated two registrar accreditation agreements after unresolved compliance failures, citing Trustname's handling of DNS abuse and IPIP's failures involving RDAP, registration data escrow, accreditation fees, and access to non-public registration data. more

More Than 100 Organizations Call for Global Surge in AI-Assisted Cyber Defense

More than 100 organizations are calling for wider use of AI in cyber defense, urging governments, technology providers and AI developers to expand funding, tools, model access and practical support for under-resourced critical infrastructure operators. more

The Missing Privacy Debate Around IPv6

IPv6 solves the Internet's address shortage and simplifies networking, but its technical elegance may carry a hidden cost: shifting privacy protections from architectural constraints toward policies controlled by Internet providers, corporations and governments. more