Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

According to the Verizon 2025 Data Breach Investigations Report (DBIR), exploitation of vulnerabilities saw a sharp 34% increase as an initial access vector compared to the previous year. This places it among the top methods attackers use to infiltrate organizations, alongside phishing and credential theft. The message is clear: even one unpatched vulnerability on your website can lead to data breaches, service downtime, and long-term reputational damage. The good news? These threats are preventable.

Reverse proxy phishing has quietly become one of the most effective –and hardest to detect– phishing tactics of the modern era. It’s fast, industrialized, and invisible to most security stacks. Instead of tricking users into handing over static credentials, these attacks use real-time relays to bypass MFA and hijack sessions as they happen.

Trustwave's Consulting and Professional Services, spearheaded by our elite SpiderLabs team has been a leader in helping clients through our renowned red and purple team test. Now, we're taking a leap forward with the introduction of Tiger Team Testing, designed to deliver rapid, targeted results at a lower cost.

The GDPR sets out clear principles for how personal data should be handled. Here are some that AI tools can easily clash with.

Exposure management is a proactive cybersecurity strategy that continuously identifies, prioritizes, and mitigates risks across an organization’s entire attack surface.

Organizations today face an unprecedented challenge: their most valuable assets can disappear in a matter of milliseconds through accidental sharing, malicious theft, or simple human error. Data Loss Prevention is a strategic approach to safeguarding information before it crosses organizational boundaries, acting as both a guardian and a gatekeeper for critical business assets.

Many tech professionals see integrating large language models (LLMs) as a simple process -just connect an API and let it run. At Wallarm, our experience has proved otherwise. Through rigorous testing and iteration, our engineering team uncovered several critical insights about deploying LLMs securely and effectively. This blog shares our journey of integrating cutting-edge AI into a security product.

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break! Have some people not learnt hardcoded passwords are bad?

Read Post

We’ve been busy! Our latest summer updates introduce powerful new capabilities to help you detect, respond to, and manage threats across your cloud-native workloads, and cloud environments – all from one unified platform. Here’s what’s new in ARMO Platform.