Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The REAL Reason Scam Ads Won't Go Away

Why are scam ads and phishing sites still everywhere? Despite the tech, resources, and talent in cybersecurity, we still find ourselves playing catch-up instead of leading the charge. One of the reasons? The industry's reactive nature and the fragmented state of intelligence sharing. In the latest episode of The Connectivity Cloud Podcast, Vladimir Krupnov and Blake Darché explore how companies like Revolut are pushing for a more proactive, collaborative, and disruptive approach to cyber defence.

The Death of Passwords: The Future of Authentication

Is passwordless authentication finally ready for prime time, or are we just replacing one set of problems with another? Welcome to Razorwire, the podcast where we share our take on the world of cybersecurity with direct, practical advice for professionals and business owners alike. I’m Jim and in this episode, we’re tackling one of the oldest challenges in information security: identity and access management.

CVE-2025-61757: Critical Pre-Auth RCE in Oracle Identity Manager

A newly disclosed vulnerability, CVE-2025-61757, exposes Oracle Identity Manager (OIM) to unauthenticated remote code execution (RCE). The flaw affects OIM versions 12.2.1.4.0 and 14.1.2.1.0 and carries a CVSS 9.8 Critical rating. CISA has added it to the Known Exploited Vulnerabilities (KEV) catalog — meaning active exploitation is confirmed.

MCP ROI in a New Era of AI Orchestrated Threats

Security leaders spent most of the past year testing AI driven security automation. Many discovered that the promise of fully autonomous SOC operations collided with the reality of hallucinations, opaque recommendations, and inconsistent outcomes. McKinsey research now shows that more than 80 percent of organizations have not realized meaningful results from gen AI programs.

Inside Brazil's New Digital Asset Rules: What Institutions Need to Know for VASP Readiness

Brazil has formalized a comprehensive framework for virtual asset service providers (VASP). This is the moment when the rules become operational, enforceable, and aligned with the scale of activity taking place in the country. For institutions already active in Brazil and those evaluating market entry, this is a shift that raises expectations and lowers uncertainty at the same time.

Managed Detection and Response Cost: What Organizations Should Expect

For many organizations, managed detection and response has become an essential service. With threats getting more deceptive and spreading at a faster rate, most IT/security teams are unable to investigate every suspicious event due to a lack of time or resources. This is why many organizations explore MDR, but they often don’t know how much managed detection and response would cost.

Managed Network Detection and Response: How It Works and Why Organizations Rely On It

Organizations today depend heavily on connected systems, cloud applications, remote users, and third-party services for their online security. In most cases, attacks do not start with an apparent alert on an endpoint. They often originate in the network in the form of a strange connection or an unusual traffic route. These signs are subtle and easy to overlook until the attacker has infiltrated further. Most IT teams try to keep an eye on this activity, but monitoring a network 24/7 is not feasible.

How Can AI Be Used in Phishing Attacks?

Phishing is the most common type of cyberattack, occurring when an attacker impersonates a trustworthy entity with the intention of carrying out fraudulent activity. Phishing is done with the motive of stealing sensitive information such as passwords, credit card numbers, and other personal data. Phishing was already quite threatening, but with the inception of Artificial Intelligence (AI), it became even more dangerous.

Making Identity Verification Simple: AU10TIX's Human-Centered Design

Digital access continues to expand across essential services, and people expect quick verification with clear steps and minimal confusion. Companies must meet strict regulatory standards while keeping user journeys smooth and welcoming. For instance, the US updates its anti-money laundering regulations to keep up with evolving threats. The International Consortium of Investigative Journalists states that the nation's political leaders recently proposed the Art Market Integrity Act. This act aims to bring down money laundering happening through art collectibles.