CyberSecure Specialist

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight

Cybersecurity companies this week shared information about new and updated banking trojans targeting users worldwide. These types of malware can enable their operators to phish credentials, steal sensitive user data, and remotely control compromised devices.  Manic ThreatFabric has detailed Manic, described as an Android malware that combines banking trojan and spyware capabilities.  The malware has mainly been used against Ukraine, including banks, government services, and messaging applications. However, it has also been observed targeting Russian…

Read More

Former NSA Director Paul Nakasone Launches National Security Advisory Firm

Retired U.S. Army General Paul M. Nakasone, former director of the National Security Agency and commander of U.S. Cyber Command, has launched a boutique national security advisory firm. The newly-formed Nakasone Group will counsel government leaders, corporations, prominent families, and other private clients confronting cybersecurity, geopolitical, and personal security risks. “After more than three decades in uniform — including leading U.S. Cyber Command and the National Security Agency — I’ve seen how quickly the threats…

Read More

Hackers Target Zimbra Servers in Active Exploitation Campaign

A recently patched Zimbra Collaboration vulnerability is being exploited in the wild, according to Poland’s CERT Polska. The security hole is tracked as CVE-2026-73570 and it was patched by the developers of the enterprise email server and collaborative software suite with the release of version 10.1.20, announced on July 20. The high-severity flaw exists when the optional ‘zimbra-snmp’ package is installed and SNMP notifications are enabled.  An attacker can exploit the vulnerability without authentication to…

Read More

Virtual Event Today: CodeSecCon – Secure Your Code and Applications

Join more than 1,500 registered attendees today for CodeSecCon, the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. Designed to address the most pressing challenges in software security, CodeSecCon empowers attendees to: Develop Secure Applications: Learn best practices for secure coding and application design. Reduce Software Vulnerabilities: Discover innovative tools and techniques to minimize risks. Enhance Collaboration: Bridge the gap between security and development teams to foster…

Read More

NIST Releases Tips & Tactics for Building Automation & Control System Cybersecurity

Credit: Shutterstock Credit: Kristina Rigopoulos, NIST Recent cyberattacks highlight the growing threat to operational technology (OT) used in critical infrastructure. Whether you work for an infrastructure owner/operator or are a consumer of an infrastructure service, the events of the past few weeks have made it clear that cybersecurity is an important factor in ensuring the safe and reliable delivery of critical goods and services. For OT owners/operators, it can be challenging to address the range…

Read More

How QR-code phishing can slip past corporate security measures

Business Security Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap. Phil Muncaster 17 Aug 2026  •  , 5 min. read Familiarity might breed contempt. But in the world of cybersecurity, it also breeds complacency, which can be a lot more dangerous. So it is with QR codes, which have become a common sight on menus, lampposts and parking meters – and, increasingly, in emails over recent years.…

Read More

Webinar Today: Rethinking Cyber Defense for AI-Speed Attacks

Rethinking Cyber Defense for AI-Speed Attacks | August 18, 2026 at 1PM ET- Register to Attend Artificial intelligence is fundamentally changing cybersecurity. As patch-to-exploit timelines shrink and attackers move at machine speed, long-standing security models are being put to the test. Can detection-first security operations keep pace, or is it time to rethink prevention as the strongest default? Join Jason Kikta, Chief Technology Officer at Automox, Dmitri Alperovitch, Co-Founder and Chairman of Silverado Policy Accelerator,…

Read More

680,000 Impacted by French Tax Authority Data Breach

France’s Directorate General of Public Finances (DGFiP) has disclosed a data breach impacting approximately 680,000 individuals. The incident was disclosed after a threat actor boasted on a hacking forum about accessing DGFiP’s internal systems and exfiltrating data. According to DGFiP, the threat actor accessed its systems in June and July, and the unauthorized access was suspended immediately upon detection. However, the public tax authority did not discover evidence of data exfiltration at the time. Last…

Read More

Stronger Cybersecurity Programs Start with People: NIST Wants Your Input on the Path Forward for Human-Centered Cybersecurity

Credit: Shutterstock When was the last time a cybersecurity process at work made you want to scream? Maybe it was a password requirement so complicated you had to write it down (defeating the purpose), a phishing simulation test that felt more like a trap than a lesson, or a confusing security warning pop-up that interrupted your work. Or maybe you’re on the other side of the equation, working as a cybersecurity professional who is wrangling…

Read More

Black Hat USA 2026: What the Hugging Face hack tells us about human responsibility

Business Security The incident involving OpenAI models shows that autonomous hacks make human oversight more important, not less Tony Anscombe 13 Aug 2026  •  , 4 min. read Hugging Face disclosed that it had been attacked by AI; OpenAI came clean and declared that it was two of their AI models that had caused the breach. This is the one-line summary of an incident that has captured the attention of the entire cybersecurity industry, and…

Read More