A security researcher reports Apple has dramatically reduced its bug bounty payouts for macOS. Key rewards for serious privacy bypasses have been slashed, some by over 80%. This comes amid a noted increase in Mac-specific malware.
A long-running campaign has weaponized popular browser extensions after they passed initial security checks. The “ShadyPanda” group has infected over 4.3 million browser instances to steal data and deploy backdoors. This represents a significant and evolving threat to enterprise security.
ServiceNow is making a major move into identity security by acquiring startup Veza. The deal, reportedly valued at over $1 billion, comes just months after Veza’s latest $108 million funding round.
A Dublin cybersecurity startup has secured $2.5 million to tackle data confidentiality in AI. Mirror Security’s platform uses fully homomorphic encryption to keep data encrypted even during computation.
Wiz is rolling out a major update to its channel strategy. The new Wiz Partner Alliance program introduces a dedicated services track for the first time, responding directly to partner demand as the company’s massive growth continues.
Brewing giant Asahi has disclosed that nearly 2 million individuals had personal data exposed in a major September 2025 cyber-attack. The incident caused widespread operational disruptions and forced temporary shutdowns across the company’s systems.
NATO’s Communications and Information Agency has signed a deal with Google Cloud for sovereign cloud capabilities. The agreement involves Google Distributed Cloud’s air-gapped version, completely disconnected from the internet.
Windows shortcut files are far more dangerous than they appear. State-sponsored hackers from Russia, China, Iran and North Korea are exploiting a vulnerability that Microsoft refuses to fix, putting millions at risk.
The ShinyHunters cybercrime group claims they’ve had access to Gainsight for nearly three months, using stolen OAuth tokens to compromise hundreds of Salesforce customer instances. The breach originated from compromised third-party apps rather than Salesforce’s platform directly. Both Salesforce and
Guardio just landed $80 million in fresh funding to tackle a growing security threat: malicious code generated by AI tools. The company has tripled its valuation since 2021 and now protects 500,000 paying users. Their new focus is scanning websites built with vibe coding tools for security vulnerabi
