Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

South Africans who fall victim to cybercrime now have more support available. MiDO Academy, The Cyber Helpline (UK) and Amazon Web Services (AWS) launched the pilot of The Cyber Helpline in South Africa, a free, confidential service providing practical guidance and compassionate support to individuals affected by online fraud, investment and employment scams, hacked accounts, phishing and smishing, social media fake profiles, sextortion, online harassment, identity theft, malware and ransomware incidents.

Keeper Security, the leading zero-trust and zero-knowledge identity security platform, today announces native integrations with Tenable that eliminate the costly delay between identifying cloud security risks and remediating them while centralizing credential management for comprehensive vulnerability assessment. These integrations allow cloud security teams to move from detection to remediation in a single workflow, without managing manual tickets or switching between tools.

The China-based threat group uses DLL sideloading in these attacks Counter Threat Unit (CTU) and SophosLabs researchers investigated a cluster of incidents attributed to the BRONZE SANDCASTLE threat group. The most distinctive technical marker for BRONZE SANDCASTLE is its consistent use of Sandboxie DLL sideloading.

This article is part of an ongoing series from Sophos frontline security operations specialists, sharing the expertise they use to strengthen our industry-leading Managed Detection and Response (MDR) service and defend customers against evolving AI-era threats. A 20% growth forecast for cybersecurity talent sounds significant. I believe it understates what we are going to see in Incident Response. The U.S.

Blocking an exfiltration means deciding, in the moment, whether the data leaving a device is sensitive. That turns a detection platform built for accuracy and scale into one that must also answer in milliseconds. Nightfall pioneered the AI-first approach to DLP. Instead of leaning on regular expressions and pattern matching alone, we use language-aware machine learning models that understand the context sensitive data appears in.

What if security teams could combine knowledge of which systems are vulnerable with evidence of how an attacker is actually moving through the network?

Cybersecurity Awareness Month encourages organizations to examine the controls behind everyday security habits. Training helps employees spot phishing and use strong authentication but does not resolve gaps in systems that govern access. Many organizations manage employee access through an identity provider (IdP) and single sign-on (SSO). However, not every AI or SaaS application connects to those systems.

The quick answer: A disaster recovery (DR) plan is only a hypothesis until it’s tested under real conditions. Regular, scoped DR and cyber recovery testing, covering people, dependencies, data, and systems, exposes the gaps that a written plan can’t reveal. 11:11 Systems helps IT and business continuity leaders validate recovery readiness before a real incident forces the issue. Think of a DR plan like a fire escape map taped to the back of a hotel room door.

Shopify phishing has evolved from the laughable “Dear Shopify Merchant” email into one of the most reliable account-takeover vectors in ecommerce. On the same pattern, Shopify shops have recently been hit with a checkout hijack campaign running through HulkApps, Swym, and Selleasy extensions, where shoppers on legitimate stores were redirected to a fake payment page on biliingtop that captured their card details before forwarding them to the real Shopify checkout.

Federal agencies are facing a critical reckoning with cybersecurity. In the past year alone, high-profile breaches have exposed millions of Americans’ personal data, compromised sensitive intelligence networks and revealed significant gaps in access control practices across some of the government’s most trusted institutions.