Browsing Category
Business
110 posts
Security Point Break covers the business of cybersecurity, from funding, acquisitions and startups to vendor strategy, market shifts and executive moves. Our reporting follows the companies, technologies and competitive forces shaping the security industry, with context for CISOs, investors, security professionals and industry leaders.
Critical Cisco Firewall Bug Under Attack by Sandworm APT
Two Cisco bugs, three attackers, one root-access foothold: patches exist, but Cisco's own broader fix is still days away.
China Pushes Back on U.S. AI Model Extraction Claims
U.S. agencies accuse Chinese AI firms of mass model extraction. Beijing calls it standard practice.
OAuth2 Proxy’s April Auth-Bypass Fix Didn’t Work: And Nobody’s Patched It Yet
A newly disclosed critical flaw shows an April fix for OAuth2 Proxy's login-bypass bug didn't stick.
SonicWall VPN Flaw Chain Gives INC Ransomware Root Access
INC Ransomware threat actors exploited a critical pre-auth bypass flaw and pairing it with a privilege-escalation bug to gain root on SonicWall SMA 1000 appliances.
Facebook Rolls Out Real-Person Verification Badge
As generative AI makes fake profiles easier to produce, Meta is asking users to record a video selfie in exchange for a badge signaling they're a real person.
Nvidia, CrowdStrike, 30+ Firms Launch Open Secure AI Alliance
Nvidia, CrowdStrike and dozens of rivals-turned-partners are betting that "open" beats regulated — building shared AI security tools now, before Washington decides who gets to use frontier models at all.
Adobe Patches 11 ColdFusion, Campaign Classic Flaws: Four Hit Max Severity
Adobe has patched 11 vulnerabilities in ColdFusion and Campaign Classic, including six critical flaws in ColdFusion that allow remote code execution. No active exploitation is reported. Users should update affected versions promptly.
Phishing Kits Abuse Microsoft Login Codes to Steal Cloud Access
LevelBlue says phishing kits are industrializing OAuth device-code attacks, giving attackers Microsoft 365 tokens without stealing a password first.
Microsoft’s Record Patch Tuesday Upstaged Within Hours by New Defender Zero-Day
Microsoft's June Patch Tuesday addressed about 200 vulnerabilities, but the emergence of a new exploit, RoguePlanet, highlights ongoing security concerns with Microsoft Defender.
Acer 5G Hotspot Has Three Critical Bugs: Patches Pending
Acer says firmware updates are coming and offers workaround fixes for three critical bugs.