README | Trends (2)

Robert Lemos
August 25, 2023

How AI could inflame one of the costliest cyber scams

Deepfakes, stolen email addresses and identity fraud drive continued gains in business email compromise attacks. How can defenders fend them off?

Cynthia Brumfield
August 15, 2023

Postcards from Hacker Summer Camp 2023

The promise and threat of AI, government policy and surprising revelations about the Viasat hack were among the major takeaways from Black Hat and DEF CON.

Cynthia Brumfield
August 15, 2023

Dark Caracal: A bumbling, yet surprisingly effective, cyber mercenary group

At DEF CON, EFF security researcher Cooper Quintin discussed a mysterious group called Dark Caracal that has proven effective despite making many mistakes.

Robert Lemos
July 18, 2023

Attackers are on the edge. Where are defenders?

VPNs, virtualization hosts, secure email gateways and other network “edge” devices have become a common entry point for attackers in significant enterprise breaches. How can defenders respond?

Blake Thompson Heuer
July 14, 2023

Top cyber takeaways from the Intelligence and National Security Summit

Concerns about China and generative AI dominated the cybersecurity discussions at the tenth edition of the Intelligence and National Security Alliance’s annual gathering, which drew hundreds of security professionals, spies and government experts.

Robert Lemos
June 13, 2023

As APIs proliferate, attackers follow

With APIs accounting for more than half of all internet traffic, attacks on mobile and web application endpoints continue to grow.

Robert Lemos
May 30, 2023

How defenders are experimenting with artificial intelligence

AI dominated conversations at the RSA Security Conference in May, but underneath the hype, some real changes are in the works.

Robert Lemos
May 09, 2023

Home is where the hackers are: The dizzying task of securing remote work

Increases in phishing attacks, credential stuffing against corporate cloud services and unpatched vulnerabilities in consumer hardware have all skyrocketed since the COVID pandemic upended work routines. With more employees logging in from home, locking down workers’ security habits and local networks has never mattered so much.

Robert Lemos
April 17, 2023

Flawed choices: Developers continue to use vulnerable open-source dependencies

While the open-source ecosystem continues to make progress on securing the production of widely used components, developers need better tools and a security culture to benefit.

Robert Lemos
March 10, 2023

Russia-Ukraine cyber conflict splits APT groups, raises threat level

The global cyberthreat landscape has changed since Russia’s invasion of Ukraine but not necessarily in the ways predicted.