Data Security

Aviatrix Chief Product Officer Chris McHenry argues that the convergence of cloud, artificial intelligence, and quantum computing is fundamentally reshaping enterprise security, demanding a proactive shift from digital transformation to digital defense, according to Forbes.

Stanley is concerning because it functions as a full-featured service, with the most expensive version claiming to guarantee that malicious apps will pass the Chrome Web Store's security checks.

The attack begins with a deceptive CAPTCHA prompt, i.e. ClickFix, tricking users into manually executing a command via the Windows Run dialog.

Investigation into a possible data security incident has been launched by Nike after the WorldLeaks extortion group allegedly stole and exposed 1.4 TB of data obtained from the footwear and apparel giant's systems, Security Affairs reports.

Developers have had their data exfiltrated to China-based servers by a pair of illicit Microsoft Visual Studio Code extensions purporting to be AI-based coding assistants as part of the MaliciousCorgi campaign, BleepingComputer reports.

This incident, linked to a fraud indictment in Guam involving pandemic unemployment benefits, marks the first publicly known instance of Microsoft sharing BitLocker keys.

Cybercriminals are exploiting the tax season to perpetrate scams, primarily through text messages and emails that falsely claim a tax refund is due or that back taxes are owed.

The newly cataloged vulnerabilities include an improper access control flaw in Vitejs (CVE-2025-31125), an improper authentication bypass in Versa Concerto SD-WAN (CVE-2025-34026), a supply-chain compromise in eslint-config-prettier (CVE-2025-54313), and a PHP remote file inclusion vulnerability in Synacor Zimbra Collaboration Suite (CVE-2025-68645).