Enterprise Security Tech

A logistics-themed phishing campaign recently pushed the CrySome remote access trojan through a multi-stage Windows infection chain, showing how attackers are blending believable business lures, native system tools, open-source security-disabling utilities, and modular malware to gain persistent control of victim machines. Researchers with LevelBlue’s SpiderLabs said the incident began with a targeted spear-phishing email disguised as a freight rate confirmation. The message

A ransomware operation tracked as JadePuffer may be one of the clearest signs yet that autonomous AI agents are moving from theory into real-world cybercrime. According to cloud security firm Sysdig, JadePuffer used a large language model agent to conduct much of the ransomware attack chain on its own, including reconnaissance, credential theft, lateral movement, persistence, privilege escalation, and data encryption. The most important part was not that the attack used new t

Cequence Security is betting that the next major interface for API security will not be another dashboard. It will be a conversation with an AI agent that can investigate risk, draft controls, generate reports, and explain exactly what it is doing before a human approves the change. The Santa Clara-based API security company announced general availability of Cequence Platform 9.0, a major AI-native release designed to let security teams, internal AI assistants, and automation

OPSWAT has taken a rugged cybersecurity device to the edge of space to make a point about the future of critical infrastructure protection: security tools may need to work in places where no one can reboot them, patch them, or connect them back to the cloud. The Tampa-based critical infrastructure cybersecurity company released video of its MetaDefender Kiosk Mini operating during a near-space validation mission, where the device was lifted by weather balloon to 104,883 feet.

A cybersecurity lawsuit in California is turning a false positive into a much bigger question for the security industry: what happens when AI-assisted threat intelligence flags a real company as suspicious, and the rest of the ecosystem treats that signal as fact? MeetingTV, a small webinar platform founded by entrepreneur Michael Robertson, has sued Koi Security and Palo Alto Networks after a December 2025 Koi report linked the company’s domain to infrastructure allegedly ti

Russian military-linked hackers are intensifying phishing campaigns against Signal and WhatsApp users, not by breaking encryption, but by convincing targets to hand over account recovery details that can unlock private messages and group chats. A new alert from the FBI and the U.S. Cybersecurity and Infrastructure Security Agency warns that Russian intelligence services are posing as automated support bots for commercial messaging apps. The campaigns are aimed at high-value t