Trending Topics
Now Meta AI has been caught hacking another company – here’s what security experts think
Hot on the heels of OpenAI and Anthropic, Meta AI has also attacked a third party. Here's the hot take from experts in the security industry.
Trending
Protect
Protect is one of TechFinitive.com’s five key pillars. Here, we provide in-depth analysis of emerging threats to businesses along with a wealth of articles that will never go out of date – because the sad truth is that attackers will always be after our data.
We have a particular focus on ransomware, from simple guides to the key terms to the real-world after effects of a phishing attack. But we also want to provide practical advice on how to protect your business, whether that’s putting defensive measures in place or reminding people of the basics of cyber hygiene.
One of our key advantages is the depth and breadth of our writers’ experience. Davey Winder is one of the UK’s most respected cybersecurity journalists, having won numerous awards (it helps that he was once a hacker himself) and been covering cybersecurity ever since it became a “thing” in the 1990s.
We also draw on the knowledge that KG Orphinades earns in their day job, advising local small businesses on how to stay secure (KG also runs a website dedicated to VPNs). Last, and most definitely not least, Simon Edwards is CEO and founder of SE Labs, one of the world’s leading security testing labs, and a board member of the Anti-Malware Testing Standards Organization (AMTSO).
If you have a story that you would like to share – and we are happy to keep company names anonymous – then email us at [email protected], follow us on Twitter or join our community on LinkedIn.
AI moves in milliseconds, rendering check-the-box security audits useless
According to Pathlock’s new AI Governance Gap Report, 23% of organisations have already been hit by AI-related security incidents
Hugging Face attack isn’t an AI wake-up call, it’s a Security 101 lesson
The lesson to learn from OpenAI's attack on Hugging Face has nothing to do with how clever AI is, and everything to do with the basics of cybersecurity
Microsoft’s record-breaking Patch Tuesday is a vulnerability itself
Big tech companies like Apple, Google and Microsoft are issuing more patches than ever, and that means organisations need to change their approach to patch management
Check your kernel version now: 15-year-old security ghost in the Linux machine
You may not believe in ghosts, but you need to believe in GhostLock if you take your Linux system security seriously.
When AI agents attack: JADEPUFFER agentic ransomware raid deploys AI from start to finish
JADEPUFFER moved from a failed login attempt to a completely working fix in only 31 seconds: welcome to a new and even scarier era of AI ransomware attacks
Confirmed: Klue’s integration with Salesforce exposed LastPass customer data (and there are lessons for us all to learn)
Klue has discovered that ransomware attackers like its "weapon" analogy, turning the company's Salesforce integration into a way to access third-party company data
DragonForce ransomware backdoor weaponises legit Microsoft Teams servers
The DragonForce ransomware attacks are the first to manipulate Microsoft Teams' TURN relay servers in a way that can mask its command-and-control traffic
Enterprise identity theft is a multi-layered crisis that no business can ignore
A 2026 Trends in Identity Report from the ITRC found that unauthorised access to devices has increased by 78% year-over-year, now accounting for 27% of all compromises
2026 FIFA World Cup threats laid bare
The World Cup is also a chance for cyberattackers to get behind your defences - and those of FIFA - so make sure you're not caught offside
No-code Android banking trojan BTMOB could cause devastating damage, says ESET
Security expert Davey Winder explains why the Android banking trojan BTMOB is causing so much concern - and why its attacks could easily spread from South America to the rest of the world
Barracuda warns of sophisticated browser-based scareware campaign
Barracuda Research has identified a web-based scareware kit designed to pressure victims into calling fraudulent technical support numbers through fake browser security alerts.
Verizon report says software vulnerabilities, not stolen credentials, are now biggest weak point
Verizon’s data breach report confirms what GitHub just found out the hard way: software vulnerabilities are now a bigger threat than stolen credentials
How Tanium is fighting the good fight against AI-powered threats
Phil Muncaster reports from Tanium Converge London, where its CEO Dan Streetman revealed the new level of threats presented by Mythos and its AI descendants
Ouroboros of cybersecurity is confirmed as the AI vulnerability disclosure cycle eats itself
The dramatic rise in the number of vulnerability disclosures may sound like a good thing, but the cyberattackers may be rubbing their hands in glee
Critical cPanel Zero-Day vulnerability confirmed — Update servers now
One of the most used web hosting control panels, cPanel, has confirmed a critical zero-day vulnerability that can enable an unauthenticated, remote attacker to gain admin access
Tenable Research discloses critical Remote Code Execution vulnerability in GitHub repository that could affect millions of devices
Tenable Research has disclosed a critical vulnerability that could affect laptops, PCs, printers, scanners and industrial tools
CrowdStrike earns consecutive Gartner Customers’ Choice honours
CrowdStrike has been named a Customers’ Choice in the 2026 Gartner Peer Insights Voice of the Customer for Security Information and Event Management (SIEM) report.
Okta vishing is the new dodgy email: here’s how to guard against it
Voice phishing has risen to a new level says a report by security researchers, and it's all aimed at compromising Single Sign-On
Splunk patches high-severity RCE in enterprise and cloud
Splunk has patched a high-severity remote code execution (RCE) vulnerability that should sit near the top of every security team’s maintenance queue.