Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Email Leaked to the Dark Web? Risks & Fixes Explained

Having email on the dark web is disturbing and more indicative of the fact that you are a target for cybercriminals. If your email address has been found in leaks stemming from a major data breach or somewhere due to unkept security, it makes you more vulnerable to identity theft, financial fraud, or personal extortion. But exactly what happens if your email is on the dark web?

Why RBAC Doesn't Work with AI Agents [And How to Fix It]

Role-Based Access Control (RBAC) is a fundamental, critical part of security architecture that prevents data from falling into the wrong hands. In regular data-based environments (deployed on the cloud or on-premise), RBAC is an effective measure in preventing unauthorized access, with a few exceptions, like successful hacking attempts or breaches. However, this system breaks down once AI comes into the picture. Let’s understand why – and what you can do about it.

Seamless API Security with Postman x Aikido

We’re teaming up with our friends at Postman to bring API security even closer to where developers already work. With the upcoming Aikido Security + Postman integration, you’ll be able to view recent security scans for your API collections—without ever leaving Postman. No new tabs. No switching tools. Just quick, clear security insights as you’re building. It’s never been easier to build and scale secure APIs as your organization grows.

Generative AI Security: Why Protection Can't Keep Pace with Innovation

The artificial intelligence revolution isn’t coming. It’s here and it’s moving faster than anyone predicted. Children now trust ChatGPT more than their parents for information. AI-generated content is becoming indistinguishable from human work. Entire industries are being reshaped by technology that seemed like science fiction just a few years ago.

Practical Solutions to Safeguarding Oil & Gas Operations from Cyber Threats

If you work in oil and gas, you already know that digital systems are the backbone of day-to-day operations. From monitoring drilling equipment to running pipeline controls and managing remote sites, almost every process depends on some form of automation. However, with this shift comes an uncomfortable truth. You're more exposed to cyber threats than ever before.

The Coinbase Hack: Lessons for Businesses

The recent attack on Coinbase - one of the largest and most regulated crypto exchanges - is yet another reminder that custodial infrastructure is far from safe. In this article, the BitHide team explains what happened, why custodial platforms are insecure, and what solutions help businesses work with crypto confidentially.

The Hidden Cost of Field Service Inefficiencies: What You're Not Seeing on the Balance Sheet

Managing field operations is a lot like repairing a leaky pipe you see the water, but not always the source. As someone who has spent over a decade overseeing technicians, tools, and tasks across multiple sites, I've learned that the biggest budget drain often comes from things that don't show up on a line item: delays, miscommunication, and time spent chasing information. These inefficiencies rarely make headlines, but they're bleeding money from service organizations. Let's break down how.

GIFTEDCROOK's Strategic Pivot: From Browser Stealer to Data Exfiltration Platform During Critical Ukraine Negotiations

The Arctic Wolf Labs team has discovered that the cyber-espionage group UAC-0226, known for utilizing the infostealer GIFTEDCROOK, has significantly evolved its capabilities. It has transitioned the malware from a basic browser data stealer (which we’re referring to as v1), through two new upgrades (v1.2 and v1.3) into a robust intelligence-gathering tool. Analysis of early files from February 2025 suggests that the GIFTEDCROOK project began as a demo during that period.

CVE-2025-20281 & CVE-2025-20282: Maximum Severity Unauthenticated RCE Vulnerabilities in Cisco ISE and ISE-PIC

On June 25, 2025, Cisco released patches for two maximum-severity vulnerabilities in Cisco Identity Services Engine (ISE) and ISE-Passive Identity Connector (ISE-PIC). Both flaws allow unauthenticated, remote threat actors to execute commands on the underlying operating system with root privileges via exposed HTTPS APIs. Although similar in outcome, the vulnerabilities are independent and do not require each other to be exploited.