What makes a threat modeling process effective? Do you need a long list of threat actors? Do you need a long list of terms? What about a short list like STRIDE? Has an effective process ever come out of a list? Farshad Abasi joins our discussion as we explain why the answer to most of those questions is No and describe the kinds of approaches that ...
New BrowserVenom malware spread via DeepSeek spoofing Numerous computers across Mexico, Brazil, Cuba, India, Nepal, Egypt, and South Africa have been compromised with the novel BrowserVenom malware in a phishing campaign involving the impersonation of Chinese artificial intelligence platform DeepSeek-R1, reports The Register.
Meta announced the takedown of three covert influence operations linked to China, Iran, and Romania, aimed at manipulating political narratives across multiple regions through fake accounts on Facebook, Instagram, and other platforms, according to the The Record.
The recent popularity of MCPs is surpassed only by the recent examples deficiencies of their secure design. The most obvious challenge is how MCPs, and many more general LLM use cases, have erased two decades of security principles behind separating code and data. We take a look at how developers are using LLMs to generate code and continue our sea...
AI-powered deepfake technologies are rapidly evolving, enabling sophisticated identity fraud across workforce, financial, and business sectors and necessitating advanced verification and credential technologies to combat these emerging threats.
A favorite meeting last week was with the founders of a company called The Hacking Games, which is all about inspiring and guiding the generations of cyber defenders who are at the beginning of their careers, and who do things much differently than those who preceded them.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
