Another one bites the dust

I’m working on expanding the AI Shipping Labs website and wanted to migrate its current version from static GitHub Pages to AWS.

I recently had the distinct pleasure of presenting at the Disobey 2026 event in Helsinki. My session, titled Data Honeytokens […]

We discuss a novel AI-augmented attack method where malicious webpages use LLM services to generate dynamic code in real-time within a browser.

We've identified an aspect of Azure’s Private Endpoint architecture that could expose Azure resources to denial of service (DoS) attacks.

Database platform MongoDB disclosed CVE-2025-14847, called MongoBleed. This is an unauthenticated memory disclosure vulnerability with a CVSS score of 8.7.

AI-generated code looks flawless until it isn't. Unit 42 breaks down how to expose these invisible flaws before they turn into your next breach.

Context: I held a talk with the same topic in CloudBrew 2025 in Belgium, about this subject and now I […]

Amazon detailed a long-running campaign by Russia against critical infrastructure organizations, particularly in the energy sector.

Secure the autonomous enterprise. Get 6 essential predictions detailing the new rules of cybersecurity required to innovate confidently in the AI-native economy.

Upcoming updates to Online Services pricing under volume licensing programs.

Leading isn't easy. Five business leaders share how to hand off responsibility, build trust, and focus on long-term success.

In the wake of the Amazon Web Services (AWS) outage earlier this week, there have been numerous articles published in the media concerning just how vulnerable our society has become to just a few Big ...

A foreign actor infiltrated the National Nuclear Security Administration’s Kansas City National Security Campus through vulnerabilities in Microsoft’s SharePoint browser-based app, raising questions a...

ConnectWise released a security update to address vulnerabilities, one of them with critical severity, in Automate product that could expose sensitive communications to interception and modification. [...]

Inside the Salesloft-Drift Breach: What It Means for SaaS & Identity SecurityIn this session, Permiso’s CTO will cover:- How attackers moved from GitHub → AWS → Salesforce using stolen OAuth to…

Representative image (AI) China on Sunday accused the US National Security Agency (NSA) of carrying out cyberattacks on its National Time Service Center. It further warned that any damage to the facility could disrupt network communications, financial systems and power supply.The Ministry of State Security said in a WeChat post that the US agency exploited vulnerabilities in the messaging services of a foreign mobile phone brand in 2022 to steal sensitive information from devices used by the center’s staff.

Disclaimer: This post reflects my personal perspective as I begin my new role at Unit 42. The views expressed here […]

Author, Creator & Presenter: Dr. Kathleen Fisher PhD, Director, Information Innovation Office (I2O), US Defense Advanced Research Projects Agency (DARPA) Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the organization’s’ YouTube channel.

Despite daunting technical challenges, a quantum computer capable of breaking public-key encryption systems may only be a decade or two off.

Rolling out Purview doesn’t have to feel like a maze. Microsoft has packaged its guidance into short, scenario driven “deployment […]

A massive NPM supply chain attack has compromised foundational packages like Chalk, affecting over 1 billion weekly downloads. We dissect the crypto-stealing malware and show you how to protect your p...

Unify SecOps with Sentinel Data Lake and Defender XDR. Learn RBAC hardening, onboarding, incident correlation, Purview audit logging, and cost aware retention.

APT28 deploys NotDoor Outlook backdoor via OneDrive DLL side-loading, enabling email-based data theft in NATO firms.

GPT-5:n epäonnistunut lanseeraus on herättänyt taas keskustelua kielimallien kehityksen hidastumisesta. Helsingin yliopiston tietojenkäsittelyprofessori Hannu Toivonen kertoo, että kielimallit eivät voi kehittyä loputtomiin.

Researchers bypass GPT-5 guardrails using narrative jailbreaks, exposing AI agents to zero-click data theft risks.

Designed to classify software without context, Project Ire replicates the gold standard in malware analysis through reverse engineering. It streamlines a complex, expert-driven process, making large-s...

Learn how to turn insider risk detection into consistent, scalable action by automating workflows with Microsoft Purview risk policies, adaptive protection, and Power Automate - complete with playbook...

I am pleased to publish, that I have been nominated as a Microsoft Security MVP in August, 2025. This milestone […]

: Under oath in French Senate, exec says it would be compelled – however unlikely – to pass local customer info to US admin

President Donald Trump’s pick to lead CISA told senators Thursday that he would prioritize evicting China from the U.S. supply chain.

Uutiset nopeasti ja luotettavasti.

Digitalisaatio on mullistanut korkeakoulutettujen työelämän. Myöhäiskapitalismin säikäyttämät ihmiset tuottavat outoa synteettistä henkilöstöhallintokieltä, ruutuväsymyksen esperantoa.

Microsoft is offering free of charge to European governments a cybersecurity programme, launched on Wednesday, to bolster their defences against cyber threats, including those enhanced by artificial intelligence, it said.

The Data Management Landing Zone (DMLZ) is the cornerstone of Microsoft’s Cloud-Scale Analytics framework. When implemented correctly, it gives every […]

Microsoft Build (often shortened to MS Build) is an annual developer conference hosted by Microsoft. It’s designed primarily for software […]

This morning, Distributed Denial of Secrets published 410 GB of data hacked from TeleMessage, the Israeli firm that makes modified versions of Signal, WhatsApp, Telegram, and WeChat that centrally arc...

Uuden kvanttitietokoneen on määrä valmistua kahden ja puolen vuoden kuluessa. Kubittimäärä nousee jopa kolmeensataan.