Black Hat stories
Hackers are exploiting vulnerabilities in hours or minutes, leaving many organisations compromised before defenders spot the breach.
Geordie AI unveils Beam, a real-time governance tool to curb risky autonomous agents as security leaders flag them as a new attack vector.
BADIIS malware is hijacking over 1,800 IIS servers worldwide, quietly boosting illicit gambling and crypto phishing sites via poisoned SEO.
Black Hat will premiere Semperis documentary Midnight in the War Room in Las Vegas, spotlighting the human cost of cyber conflict.
Keeper Security tops four million paid users as it expands its unified PAM platform globally and earns fresh analyst and industry recognition.
Backslash launches MCP Security to monitor AI coding agents on developer machines, tackling data leaks, prompt injection and privilege abuse.
SquareX research finds fundamental flaws in browsers and AI tools, warning they have become attackers' main route into corporate networks.
AI agents, real-time compliance and deep fake cyber attacks will define 2026 as trust becomes the key battleground for organisations.
Law enforcement and cybersecurity firms have disrupted major malware networks amid rising risks from AI-driven cyberattacks and escalating supply chain breaches globally.
SquareX will reveal new browser security and passkey vulnerabilities at Black Hat USA and DEF CON 33, highlighting critical gaps in current protections.
SquareX launches The Browser Security Field Manual, a guide tackling rising browser cyber threats with insights from CISOs at Arista Networks, Dyson and Expedia.
Audrey Adeline of SquareX warns the browser, where 80% of device time is spent, is the new cybersecurity battleground in an evolving threat landscape.
SquareX reveals data splicing attacks exploiting browser flaws to bypass major DLP solutions, risking corporate data loss and intellectual property theft.
Endor Labs unveiled Upgrade Impact Analysis and Endor Magic Patches at Black Hat, offering new tools to tackle OSS security risks and accelerate vulnerability remediation.
Microsoft's August Patch Tuesday fixes 88 vulnerabilities, with evidence of in-the-wild exploitation and public disclosure for 10 of them.
Over half of business hall attendees at the 2023 BlackHat USA Conference believe passwordless is viable, says Delinea survey.
The Privacy Personas functionality identifies not only the type of personally identifiable information but also the context and role within the data.
The most notable trends are issues related to future threats, a decreasing workforce and neglected spending priorities.
Major SASE vendors admit Secure Web Gateways cannot block Last Mile Reassembly attacks, which let malware bypass defences by assembling inside browsers.
Attendees at this year's Black Hat Asia conference are wary of what's ahead from some of the world's most notorious countries behind cyber attacks.
.webp)
