Securing the Digital Frontier: Key Themes from Black Hat USA 2025

Another year, another Black Hat USA. And what a show it was as thousands descended on the Entertainment Capital of the World. The conference returned to the Mandalay Bay Convention Center in Las Vegas with a packed six-day program, kicking off with four days of specialized cybersecurity trainings, followed by the main expo on August 6-7.

Indicators of Compromise in Threat Intelligence: Real-Time Action

Organizations face mounting pressure from cyber threats that exploit detection delays. Industry data shows breach costs averaging $4.45 million per incident, with late detection driving exponential damage. Attackers typically operate undetected for 197 days, establishing deep network presence before discovery. An indicator of compromise is digital evidence or a signal that a network or endpoint has been breached or that malicious activity has occurred.

Beyond PCI and HIPAA: How Feroot Powers California Invasion of Privacy Act (CIPA) Compliance

Yes—if your website, app, or other online platform interacts with users located in California, CIPA may apply, even if your business is not physically based there. Enforced under California Penal Code §§ 631, 632, 632.7, and 637.2, CIPA was originally designed to stop wiretapping and unauthorized call recording. Courts are increasingly applying it to digital communications, including web chats, form submissions, and user behavior tracking. The challenge?

The Role of AI Custom Solutions in Modern Financial Services

AI has been hard at work redefining the limits of what can be done in almost every industry, but in finance, the stakes and the payoff are especially high. Algorithms are used to make decisions that used to be made by experienced analysts, such as in fraud detection and portfolio optimization. However, the distinction between merely applying AI and actually taking advantage of it is sometimes as simple as a single factor - customization.

Buy Crypto with Bank Account: The Complete Guide

In the fast-moving world of digital finance, knowing how to buy crypto with a bank account is like having a master key that unlocks one of the most stable and efficient doors to the crypto universe. As more people swap cash for crypto, the method of payment can make or break the experience. Whether you're investing for the long haul or trading like it's going out of style, using your bank account offers a blend of security and simplicity that stands out in a crowded field of payment options.

The New Guy (a.k.a. Agentic AI)

AI agents have already caused unintended record updates, broken workflows, and pushed flawed logic into production systems. These misfires often go unnoticed until forecasts stall, pipelines break, or sensitive data is affected. These aren’t hallucinations. They’re executed actions with real consequences. At Rubrik, we’ve spent years helping enterprises recover from ransomware, insider threats, and operational errors. The pattern is always the same: Damage happens fast. The root cause is murky. And visibility is fragmented.

Introducing the Riscosity AI Firewall

AI is moving through enterprises faster than security teams can track. Over the past year, AI privacy incidents have risen 56%, and most of those stem from tools security never knew were in use. 84% of SaaS tools are purchased outside IT, and 62% of CISOs say fewer than a quarter of AI tools in use have been approved through procurement. That means sensitive, regulated, or confidential data is often flowing to AI services invisibly, sometimes across borders, without governance or guardrails.

When Hackers Call: Social Engineering, Abusing Brave Support, and EncryptHub's Expanding Arsenal

Trustwave SpiderLabs researchers have recently identified an EncryptHub campaign that combines social engineering with abuse of the Brave Support platform to deliver malicious payloads via the CVE-2025-26633 vulnerability. In this blog post, we will break down the techniques used in the campaign and highlight the new tools employed by the threat group.

Episode 3: Exploring ManageEngine PAM's certificate lifecycle management capabilities

In the third installment of the PAM Masterclass training series, we'll focus on mastering certificate lifecycle management. This session will guide you through best practices for deploying, renewing, and monitoring certificates to help you build a secure, well-maintained IT environment.