Enterprise Security Tech

North Korean hackers are targeting cryptocurrency and Web3 professionals with fake job interviews that install remote access malware on Windows and macOS computers. Researchers at SOCRadar linked the campaign to Famous Chollima, also known as Wagemole. The group poses as recruiters, impersonates legitimate companies and directs victims to convincing online skills assessments. The sites collect personal information, present job-specific questions and pressure candidates with c

The AI platform says attackers turned a malicious dataset into an entry point for stealing credentials and moving through its internal systems. The incident raises new questions about AI supply chain security, autonomous hacking tools, and whether defenders can keep pace with machine-speed attacks. Hugging Face has disclosed a cybersecurity breach that exposed internal datasets and service credentials after attackers allegedly weaponized a dataset uploaded to its widely used

The Pentagon has halted the next stage of its Cybersecurity Maturity Model Certification rollout, delaying a major expansion of independent cybersecurity audits for companies working across the defense supply chain. The Defense Department announced July 13 that it is suspending CMMC Phase 2, which had been scheduled to begin November 10, 2026. The phase would have significantly increased the number of contracts requiring assessments conducted by certified third-party organiza

As enterprises move AI agents from experiments into production, the biggest challenge may not be model intelligence, but whether organizations can trust those systems with real authority. In this interview, Descope co-founder Rishi Bhargava explains why identity, permissioning, and accountability will determine which companies can safely scale agentic AI, and which will be forced to keep it confined to the sandbox. Everyone seems to be talking about AI agents right now. Why h

Microsoft is warning Windows users to expect a growing number of security updates as artificial intelligence dramatically speeds up the company's ability to uncover software vulnerabilities before attackers can exploit them. In a new blog post, Microsoft said AI is fundamentally changing how software flaws are discovered by enabling security teams to analyze significantly more code in less time. Rather than waiting for vulnerabilities to surface through external researchers o