Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Wallarm Research has just released a powerful new Nuclei template targeting a new kind of exposure: the Model Context Protocol (MCP). This isn’t about legacy devtools or generic JSON-RPC pinging. It’s about the protocol fueling next-gen LLM applications — and it’s already showing up exposed in the wild.

On March 25, OpenAI introduced image generation for ChatGPT-4o and ChatGPT-4o mini. On March 31, it was announced that the tool was available for free to all users. Since then, users have quickly discovered that ChatGPT’s image generator can be manipulated to create fake receipts and forge other documents.

Xona, the leading provider of secure access solutions for critical infrastructure, is excited to announce a strategic partnership with Oregon Systems, a premier cybersecurity value added distributor specializing in Operational Technology (OT), Critical Infrastructure Security and providing High performance computing (HPC) solutions in the Middle East.

Are you worried about your privacy online? You're not alone. In one U.S. survey, three out of every four respondents expressed growing concerns about their data privacy. In the past five years, the vast majority of businesses and organizations have been victim to cyberattacks, and the average cost of data breaches has increased by $137,000.

In the ever-evolving landscape of digital security, staying ahead of threats and ensuring organizational protection is paramount. Enter OpenSSL3.0—a major step forward in modernizing cryptographic standards and compliance. OpenSSL3.0 is redefining how organizations and developers safeguard their digital environments.

Generative AI (GenAI) is poised to revolutionize the cloud security posture management (CSPM) space, bringing intelligence, automation, and context to increase the effectiveness of managing cloud risk. Maintaining a robust security posture in the cloud can be challenging as the number of deployed cloud services increases across diverse clouds. Soon, AI-driven CSPM will play a critical role in helping security and cloud teams to keep pace with misconfigurations and compliance gaps.

‍Cybersecurity governance, risk, and compliance (GRC) programs today serve as the backbone of enterprise security, helping organizations holistically manage threats, enforce policies, and maintain regulatory compliance, all while advancing the business mission.

Building strong cybersecurity doesn’t require fancy tools or a Hollywood-style war room. Often, it just takes the basics ‒ done really well. Think of it like gardening: healthy habits, applied consistently, create deep roots that protect your business when storms roll in. Here are five essential practices that every organization ‒ from small MSPs to midsize enterprises ‒ should plant today to ensure a secure tomorrow.

Data loss prevention (DLP) solutions, which kick in after data is stored, are insufficient for NIS2 compliance. Here’s how to plug the DLP security gap before data is stored. Does traditional data loss prevention (DLP) software help or hinder NIS2 compliance?

Before you click on that email or open that text message — is that really the United States Internal Revenue Service (IRS) or your tax provider? It may not be. BlueVoyant has identified dozens of websites impersonating the IRS, posing a risk to online users. These phishing sites likely aim to steal sensitive information by tricking users into believing they are interacting with the legitimate IRS website. Here are some examples of the phishing sites uncovered by BlueVoyant.