John P. Meehan Agency, an insurance broker in Pennsylvania, issued a press release on November 22. It begins: John P. Meehan Agency, Inc. (“Meehan”) takes the protection of personal information seriously. As part of that commitment, we are writing to notify you of a data privacy incident involving personal information of certain individuals. The wording…
Despite years of investment in Zero Trust, SSE, and endpoint protection, many enterprises are still leaving one critical layer exposed: the browser. It’s where 85% of modern work now happens. It’s also where copy/paste actions, unsanctioned GenAI usage, rogue extensions, and personal devices create a risk surface that most security stacks weren’t designed to handle….
If you’re evaluating AI-powered SOC platforms, you’ve likely seen bold claims: faster triage, smarter remediation, and less noise. But under the hood, not all AI is created equal. Many solutions rely on pre-trained AI models that are hardwired for a handful of specific use cases. While that might work for yesterday’s SOC, today’s reality is…
Docket Number 25-0883 in District Court for the District of Columbia. Lawsuit filed against Defense Secretary Pete Hegseth, DNI Tulsi Gabbard, CIA Director John Ratcliffe, Treasury Secretary Scott Bessent, Secretary of State and acting Archivist Marco Rubio, and the U.S. National Archives and Records Administration concerning news reports that journalist Jeffery Goldberg had been added…
Alexander Martin reports: The British government sanctioned 18 Russian military intelligence officers on Friday, alleging their units were responsible for cyber reconnaissance operations including those leading to hundreds of murders through the targeting of civilians in Ukraine. Three units of the GRU have been sanctioned, alongside officers whom the British authorities said were responsible for…
A critical security vulnerability has been disclosed in AMI’s MegaRAC Baseboard Management Controller (BMC) software that could allow an attacker to bypass authentication and carry out post-exploitation actions. The vulnerability, tracked as CVE-2024-54085, carries a CVSS v4 score of 10.0, indicating maximum severity. “A local or remote attacker can exploit the vulnerability by accessing the
The Russian advanced persistent threat (APT) group known as COLDRIVER has been attributed to a fresh round of ClickFix-style attacks designed to deliver two new “lightweight” malware families tracked as BAITSWITCH and SIMPLEFIX. Zscaler ThreatLabz, which detected the new multi-stage ClickFix campaign earlier this month, described BAITSWITCH as a downloader that ultimately drops SIMPLEFIX, a
