A new cybersecurity startup called Miru has launched, aiming to streamline complex investigations. Founded by three former eBay security experts, the company just raised $2.7 million in pre-seed funding. Their platform uses a knowledge graph and AI agents to help analysts connect fragmented data.
December’s Patch Tuesday is lighter than usual with 57 Microsoft CVEs, but don’t get complacent. One Windows flaw is already under attack, and critical updates for Notepad++, Ivanti, and Fortinet demand immediate attention from sysadmins.
Axon Enterprise is starting a real-world test of facial recognition on police body cameras with the Edmonton Police Department. This marks a reversal from its 2019 stance and could pave the way for pervasive use in the U.S. Privacy advocates are sounding the alarm.
Analyst firm Gartner is telling enterprises to block the use of AI-powered browsers until security risks are managed. This follows recent studies highlighting vulnerabilities like prompt injection and data exfiltration. The debate centers on the trade-off between productivity gains and emerging secu
A maximum severity vulnerability in React, dubbed React2Shell, is being actively exploited less than a week after its December 3 disclosure. Threat actors are targeting internet-facing Next.js applications for cryptomining, credential theft, and backdoor installation. Security firms warn exploitatio
NordVPN is expanding its security toolkit with a new email protection feature. It scans links in your webmail inbox for phishing and malware, flagging dangers before you click. The tool is part of the Threat Protection Pro suite for macOS and Windows.
Portugal has formally amended its cybercrime legislation to create a legal exemption for ethical hackers and cybersecurity researchers. The move, announced on December 4, 2024, aligns with similar actions by Germany, the US, and the UK to foster responsible vulnerability disclosure.
X has deactivated the European Commission’s advertising account on its platform, just days after receiving a landmark €120 million fine for Digital Services Act violations. The move escalates a bitter dispute over transparency and platform rules.
A new article from XDA-Developers warns that while privileged Proxmox LXCs simplify GPU passthrough and network shares, they pose a severe security risk. The containers run with the same privileges as the host’s root user, creating a potential escape path for malware.
A sophisticated, previously unknown Chinese cyber-espionage actor dubbed Warp Panda is targeting North American companies. The group uses custom malware to hide in VMware cloud environments for long-term intelligence gathering. U.S. cybersecurity agencies have confirmed the threat.
