Report: Romance Scams Cost UK Victims £102 Million Last Year

UK residents lost £102 million ($138 million US) to romance scams in 2025, according to a new report from the City of London Police. “Data shows 10,784 reports of romance fraud were made to Report Fraud last year - a 29 percent increase compared with 2024,” the report says. “Police believe this rise is partly driven by increased awareness and confidence in reporting, but it also highlights the ongoing scale and impact of a crime that often unfolds over weeks or months.

Leaked Kubernetes Secrets: Impact Assessment and Mitigation Strategies

A single leaked Kubernetes credential rarely stays in the cluster. It opens the registry credentials, private Docker images, and private GitHub repositories behind it. In Q1 2026 alone, our detectors caught close to 2,000 new such leaks on GitHub, 28% valid at leak time.

INETCO surpasses 100 billion annual transactions as demand for payment fraud protection soars

Monitoring milestone highlights shift toward real-time transaction intelligence as financial institutions face escalating fraud and operational risk VANCOUVER, B.C. — May 21, 2026 — INETCO, a global leader in real-time payment fraud prevention, today announced the monitoring of more than 100 billion transactions per year, empowering financial institutions and payment service providers across more than 30 countries to outsmart fraudsters, stay compliant and keep every customer safe.

How to Protect Identities and Sessions from Infostealers

Infostealers are among the most persistent and damaging strains of malware affecting individuals and organizations worldwide. These stealthy and malicious programs often go unnoticed, quietly infiltrating devices to steal sensitive data and relay it to cybercriminals. From session tokens and login credentials to financial information and browser-stored data, infostealers pose a grave risk to organizations.

Misconfigured Security Controls Open the Door for Storm-2949

The Microsoft Defender Security Research Team and Microsoft Threat Intelligence documented a campaign in which Storm-2949 abused Microsoft Entra ID accounts to exfiltrate data from Microsoft 365 and Azure environments. The attack shows how cloud intrusions increasingly unfold through identity systems, administrative features, and legitimate platform capabilities rather than obvious malware or traditional endpoint compromise.

Building the Post-Mythos Security Organization: From Episodic Security to Continuous Assurance

In an era where AI accelerates both innovation and adversarial capability, security leaders are confronting a difficult reality: traditional approaches to cyber defense are no longer sufficient. Cyberhaven’s Office of the CISO is responding with a forward-looking strategy designed not simply to keep pace with emerging threats, but to fundamentally redefine enterprise readiness in a post-Mythos world.

Govern AI agents the right way with Identity Manager by One Identity

AI agents are becoming an inseparable part of identity governance, sometimes being created by other AI agents and acting proactively across platforms at machine speed — but who’s watching them? Identity Manager 10.0 by One Identity answers that question. Hear Ingrid Thorpe, director of product management for Identity Manager, explore how the solution governs agentic workflows, tackles agent-specific risks and integrates across cloud and enterprise platforms, holding non-human identities (NHIs) accountable.

VMware to Hyper-V Migration with Microsoft Virtual Machine Converter (Step-by-Step)

In this video, you’ll learn how to migrate a VMware virtual machine to Microsoft Hyper-V using Microsoft Virtual Machine Converter (MVMC). The walkthrough covers two real-world migration scenarios: Migrating a VMware VM from an ESXi host using the MVMC GUI Converting VMware virtual disks to Hyper-V format using PowerShell cmdlets The example VM runs Windows Server 2019, and the video explains key prerequisites such as uninstalling VMware Tools, checking the boot mode (BIOS or UEFI), and choosing the correct Hyper-V VM generation.

Next.js Vulnerability Exposes Credentials and Protected Data - Why Runtime API Security Matters

A newly disclosed security issue, tracked as CVE-2026-44578, affecting Next.js applications is raising concerns across the developer and security communities after researchers identified multiple authorization bypass and middleware evasion paths that could expose protected application data and credentials. The vulnerabilities impact several versions of Next.js and allow attackers to bypass middleware-based authorization controls using crafted requests and route manipulation techniques.

Your Browser Is Stealing Your Data Right Now

In this video, you will learn how lightweight OS-level instrumentation binds lineage metadata to clipboard content the moment data is copied, how that tag survives edits, reformatting, and translation across applications, and how provenance-based policy replaces pattern matching with precision rules tied to the actual source of the data. You will also learn how pairing network tools with a browser extension captures user intent before encryption, eliminating the alert fatigue that buries real risk in noise.