Cloud security giant Zscaler is acquiring AI security specialist SPLX to embed dedicated AI protection into its Zero Trust Exchange platform. The acquisition comes as companies are projected to spend $375 billion on AI infrastructure in 2025, a 67% jump from last year. SPLX brings automated red-team
Hundreds of malicious apps bypassed Google’s security to reach the official Play Store, where they were downloaded millions of times. The manufacturing and energy sectors saw the biggest increases in targeted attacks, with India and the US accounting for most malicious traffic.
The UK retailer confirmed a massive financial impact from an April cyber attack that prevented online clothing and furniture sales for nearly two months. M&S believes Russian cyber criminals were behind the breach that also led to customer data theft.
UK mobile operators are upgrading networks to block scam calls using AI and advanced tracing technology. The move comes as fraud accounts for over 40% of UK crime, with telecom-enabled scams causing 29% of total losses despite being only 17% of cases.
Security researchers uncovered Russian spies using Microsoft’s Hyper-V to create invisible virtual machines that bypass endpoint detection. The hidden VMs host custom malware that gives attackers persistent access while appearing as legitimate traffic.
Passwordless authentication sounds like the ultimate security solution, but it’s creating new problems. The real challenge is making security seamless across diverse enterprise environments. Usability, not password elimination, should be the priority.
Three of the most notorious hacking groups have formed a unified collective called Scattered LAPSUS$ Hunters. The alliance represents a strategic merger of criminal brands rather than just temporary collaboration. Security researchers warn this could reshape the data-extortion landscape for years to
DragonForce has emerged as a new ransomware threat using Conti’s leaked source code. The group has shifted to a cartel model that encourages branded variants and has partnered with notorious access brokers.
Identity weaknesses have become the top source of cloud security incidents, with attackers buying legitimate credentials for as little as $2. The problem is compounded by the fact that 99% of cloud identities are over-privileged, creating an enormous attack surface.
A senior defense contractor executive’s admission of stealing and selling $35 million worth of cyber weapons to Russia reveals systemic security failures. The case exposes how trusted insiders can bypass even the most sophisticated technical controls.
