Enterprise
Your SBOM won't save you: Closing the provenance gap in software security
"The industry has spent five years building better autopsies. Now it needs to start building gates."
Security
Quantum
"Harvest now, decrypt later is a today problem": Collapsing uncertainty in quantum security
Q-Day - the moment when quantum computers will be able to crack traditional cryptography - may not be a notional future threat forever.
AI
AI slop is the "ideal cover" for covert agent communications, researchers say
Bots can hide secret information that's invisible to most humans within LLM-generated "synthetic multimedia content".
Enterprise
"Where risk and invisibility collide": Mapping Shadow AI in the enterprise
"Employees are not trying to be reckless, but unmanaged AI creates a direct path for sensitive data and information to leave the business."
Cyberwar
Russian cyber-spies target UK and European officials via messaging apps
High-risk figures warned to exercise extreme caution when using WhatsApp, Signal and other third-party applications.
Quantum
Quantum attacks could crack cryptocurrency encryption in minutes, Google warns
Research sheds new light on Google’s decision to accelerate its shift to post-quantum cryptography.
Financial Systems
Catching connected criminals: Exposing the networks driving modern fraud
Financial crime is now a complex web spun by coordinated networks—and investigators face a difficult task untangling it.
Quantum
Google speeds up post-quantum migration to counter "harvest now, decrypt later" attacks
Traditional encryption may soon be trivial to crack - prompting adversaries to gather sensitive protected data they can access in future.
Security
China’s Red Menshen “sleeper cell” spies caught hiding deep inside global telecoms networks
Rapid7 uncovers "ongoing" espionage campaign involving long-term persistence within highly sensitive communications environments.
Security
Threat actors exploit identity at “industrial scale” as trust becomes the attack surface
Adversaries are pushing beyond the perimeter to exploit the trusted infrastructure that keeps global businesses running.
Government
US ban on Chinese routers leaves “millions” of insecure devices in American homes
Blocking sales of foreign-made routers will fail to secure vast numbers of older devices described as threat actors’ “attack vector of choice”.
Cyberwar
Beyond Zero Trust: Strategies for securing the multi-domain digital battlespace
"AI investments within national defence departments risk coming to nothing if command-and-control systems aren’t backed by agile data flow."