Kaspersky GReAT uncovers attack targeting government-only Windows system in Asia

Kaspersky’s Global Research and Analysis Team (GReAT) has uncovered an attack targeting a customized version of Windows 10 used exclusively by government organizations in an Asian country. The attackers used legitimate software components to launch NetamLoader, a previously unknown malware Read More …

EMudhra Intermediate CA Certificates Compromised

Eight intermediate certificate authority (CA) private keys belonging to Indian CA eMudhra Limited were compromised due to a critical cryptographic defect during the certificate generation process. The private keys in this incident were generated with insufficient randomness, allowing potential attackers Read More …

G7 tells businesses to get ready for quantum cybersecurity threats

The G7, a collection of some of the world’s most powerful economies, is urging organizations to adopt quantum-resistant encryption as soon as possible and minimize the risk of losing sensitive data to technologically advanced threat actors. Virtually every industry in Read More …

Confidential computing’s core trust mechanism is broken. The fix may not exist

Vendors are trying to position “confidential computing” as the technical backbone of Europe’s sovereign cloud ambitions. But new research shows that a security protocol used to prove cryptographic trust in the system may have a fundamental architectural flaw. Confidential computing Read More …

Inside AD CS Escalation: Unpacking Advanced Misuse Techniques and Tools

Active Directory Certificate Services (AD CS) is a foundational component of Windows enterprise infrastructure, responsible for managing public key infrastructure (PKI) and issuing certificates that enable authentication and encryption across networks. Despite its critical role in the enterprise identity infrastructure, Read More …

When Wi-Fi Encryption Fails: Protecting Your Enterprise from AirSnitch Attacks

Enterprises have long trusted Wi-Fi encryption and client isolation to secure their wireless infrastructure. However, Palo Alto conducted research presented at the NDSS Symposium 2026 that reveals that these safeguards can be breached by a novel set of attack techniques Read More …

New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises

It’s hard to overstate the role that Wi-Fi plays in virtually every facet of life. The organization that shepherds the wireless protocol says that more than 48 billion Wi-Fi-enabled devices have shipped since it debuted in the late 1990s. New Read More …

Microsoft gave FBI a set of BitLocker encryption keys to unlock suspects’ laptops

Microsoft provided the FBI with the recovery keys to unlock encrypted data on the hard drives of three laptops as part of a federal investigation, Forbes reported on Friday. Many modern Windows computers rely on full-disk encryption, called BitLocker, which Read More …

Prioritising post-quantum cryptography migration activities in financial services

As post-quantum cryptography (PQC) becomes integrated into mainstream information technology (IT) products and services, financial services institutions must begin to execute their transition strategies. This document provides actionable guidelines to incorporate quantum safety into existing risk management frameworks by assessing Read More …

From Linear to Complex: An Upgrade in RansomHouse Encryption

RansomHouse is a ransomware-as-a-service (RaaS) operation run by a group that we track as Jolly Scorpius. Recent samples of the associated binaries used in RansomHouse operations reveal a significant upgrade in encryption. This article explores the upgrade of RansomHouse encryption Read More …