10 passkey survival tips: The best preparation for a password-less future is to start living there now

Although passkeys remain an evolving ecosystem, we’d be wise to embrace tomorrow’s authentication standard today. Here are ZDNET’s 10 recommendations for reaching passkey paradise.

Latest stories for ZDNET in Security – ​Read More

SonicWall Flags Two More Vulnerabilities as Exploited

SonicWall has updated the advisories for two vulnerabilities to warn that they are being exploited in the wild.

The post SonicWall Flags Two More Vulnerabilities as Exploited appeared first on SecurityWeek.

SecurityWeek – ​Read More

5 things to do on World Password Day to keep your accounts safe

With password best practices continuing to evolve, now’s a good time for a refresher. Consider this your annual cybersecurity to-do list.

Latest stories for ZDNET in Security – ​Read More

Ascension Discloses Data Breach Potentially Linked to Cleo Hack

Ascension is notifying over 100,000 people that their personal information was stolen in a data breach potentially linked to the Cleo hack.

The post Ascension Discloses Data Breach Potentially Linked to Cleo Hack appeared first on SecurityWeek.

SecurityWeek – ​Read More

RAG can make AI models riskier and less reliable, new research shows

According to Bloomberg, the increasingly popular AI framework can vastly increase your chances of getting dangerous answers. What can you do?

Latest stories for ZDNET in Security – ​Read More

SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models

SonicWall has revealed that two now-patched security flaws impacting its SMA100 Secure Mobile Access (SMA) appliances have been exploited in the wild.
The vulnerabilities in question are listed below –

CVE-2023-44221 (CVSS score: 7.2) – Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to

The Hacker News – ​Read More

North Korea Stole Your Job

For years, North Korea has been secretly placing young IT workers inside Western companies. With AI, their schemes are now more devious—and effective—than ever.

Security Latest – ​Read More

Billbug Expands Cyber-Espionage Campaign in Southeast Asia

The China-linked cyber-operations group, better known as Lotus Panda, uses its own custom malware to focus on government agencies and private companies in Hong Kong, the Philippines, Taiwan, and Vietnam.

darkreading – ​Read More

Prolific RansomHub Operation Goes Dark

The chat infrastructure and data-leak site of the notorious ransomware-as-a-service group has been inactive since March 31, according to security vendors.

darkreading – ​Read More

Adversaries Are Toying With US Networks & DC Is Short on Answers

While nation-state actors are demonstrating how easily they can infiltrate US networks, government officials don’t seem to have a clear vision for what comes next.

darkreading – ​Read More