Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

New AMOS Infection Vector Highlights Risks around AI Adoption

During a recent investigation into AMOS InfoStealer, Kroll Threat Intelligence Team has discovered a troubling new delivery vector that leverages the growing trust users place in AI tools. In this case, attackers leveraged ChatGPT as the source of guidance, tricking victims into initiating the infection, presenting it as a legitimate solution to a common technical problem. Victims were tricked into believing they were running a harmless command to fix a sound issue on their Mac device.

Top 12 Privileged Access Management (PAM) Use Cases in 2026

Privileged Access Management (PAM) is your organization's security control center for managing and monitoring high-level access to critical systems. Think of it as a sophisticated vault system that safeguards your most powerful administrative credentials while maintaining detailed audit trails of their usage. As we head into 2026, PAM has become crucial. Here's why: Cyberattacks are getting scarier and more complicated.

How strategic CISOs turn AI risks into competitive advantages

As the flurry of excitement over fresh AI innovation begins to fade, risk leaders, heads of GRC and CISOs have a new challenge to tackle. Regulators, customers, and boards are all asking harder questions about how AI is used, secured, and audited. For CISOs, AI governance is now a board-level expectation. Some organizations will be able to confidently show their measured and documented approach to AI governance.

The Top 5 Cyber Threats That Targeted Small Businesses in 2025

As we look back at 2025 and onward, there are five cyber threats that stand out as the most pressing for small businesses. No single solution eliminates cyber risk. The most effective strategy for small businesses is to combine multiple layers of defense. Endpoint security, email filtering, secure backups, and continuous education together create a much stronger posture than any one tool can provide on its own.

Holding Tech Platforms Accountable for Online Gender Based Violence

Online abuse is now a major part of gender based violence. Many survivors experience harassment, stalking, threats or image based abuse through social media, messaging apps and other digital platforms. The UK’s Online Safety Act 2023 has created new rules for platforms, but real change only happens when survivor services, tech companies and the public all play their part.

DLP Compliance Guide: Meeting HIPAA, GDPR, & PCI Requirements

Compliance and data protection are inseparable in today's digital-first world. With increasing regulatory scrutiny, expanding privacy laws, and growing customer expectations around data stewardship, organizations can no longer afford to treat compliance as a checkbox exercise.

CVE-2025-66516: Critical XXE Vulnerability Exposes Apache Tika Deployments

A critical vulnerability, CVE-2025-66516 (CVSS 10.0), has been identified in Apache Tika, affecting how the framework processes PDF files containing XFA (XML Forms Architecture) data. The vulnerability resides in tika-core, which means any system using Tika’s default parsing behavior remains vulnerable even if the PDF parser module was previously patched. No special configuration or insecure application code is required; simply ingesting a malicious PDF is enough to trigger the exploit.

Senior or Specialist Worker Visa for Security Specialists: What Is the Best Way to Immigrate to the UK?

Companies around the world, including those in the United Kingdom, are in extremely high demand for security specialists. This is a result of the rapid integration of new technologies, such as Artificial Intelligence (AI), cloud computing, and the Internet of Things (IoT), which has increased security threats, leading to the need for security personnel. If you're a security specialist, companies in the UK managing sensitive infrastructure, financial data, defense systems, and digital supply chains may be seeking your services.

The Future of AI in the Crane Industry: Safety, Intelligence, and Industrial Upgrading

As artificial intelligence (AI) technologies continue to advance, their influence is rapidly expanding across a wide range of industries. The crane and lifting-equipment sector is no exception. AI is reshaping how cranes operate, how they are maintained, and how future industrial environments ensure safety and efficiency. This article explores the key development prospects of AI in crane machinery-focusing on intelligence, safety, efficiency, and industrial transformation-through a security-centric lens suitable for modern industrial operations.

The Ultimate Guide to Employee Performance Tracking Software

Did you know that businesses using employee performance tracking software report higher productivity and better team engagement? Performance tracking software does more than measure output. It helps managers support employees, set clear goals and make smarter decisions. In this guide, we explore everything about employee performance tracking software. From key features to benefits and best practices, you will learn how it can improve productivity and satisfaction at work.