Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Every day, security teams are expected to manage risks in cloud environments that they don’t fully control, can’t always see, and that are constantly changing. Cloud-native assets—such as container workloads, autoscaling groups, and serverless functions—are highly dynamic, appearing, disappearing, and evolving in response to demand and functionality changes.

Managing Common Vulnerabilities and Exposures (CVEs) is one of the most daunting challenges for Chief Information Security Officers (CISOs) today. In 2024 alone, over 40,000 CVEs were issued by the National Institute of Standards and Technology (NIST), forcing security teams to sift through an overwhelming volume of threats. With hybrid, multi-cloud networks expanding in complexity, manually identifying, prioritizing, and remediating vulnerabilities have become an unsustainable burden.

Did you know that there are approximately 12.52 million credit card users in Australia, along with 43.77 million actively issued debit cards? These figures reflect PCI DSS compliance in Australia’s heavy reliance on digital payments and card-based transactions for everyday purchases and online commerce. However, with this widespread adoption comes an equally significant risk which is the growing threat of data breaches and payment fraud.

Clone phishing is another scam that threatens our online security and data. Throughout this article, we will analyze what clone phishing is with real-world examples. In doing so, you can help identify this kind of scam and keep your personal and business information safe.

It’s safe to say that remote work is here to stay, and hybrid arrangements seem to be getting a boost in 2025. While flexible work models are highly desirable for employees, they create new cybersecurity challenges for businesses. Remote work has quickly become the norm, causing businesses to rethink security protocols. Implementing security measures outside of a centralized office requires a robust strategy—so how can you effectively mitigate risk while still ensuring operational efficiency?

In this episode of the Security Matters podcast, host David Puner is joined by Lavi Lazarovitz, Vice President of Cyber Research at CyberArk Labs, to explore the transformative impact of AI agents on cybersecurity and automation. They discuss real-world scenarios where AI agents monitor security logs, flag anomalies, and automate responses, highlighting both the opportunities and risks associated with these advanced technologies.

The Medusa ransomware gang continues to present a major threat to the critical infrastructure sector, according to a newly-released joint advisory from the FBI, Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing and Analysis Center (MS-ISAC).

6G could be available by the end of the decade, which should decrease latency and connectivity speeds for users. However, these wireless networks present new cybersecurity challenges. What should industry professionals prepare for?

During routine monitoring of the cyber threat landscape in Southeast Asia, the Arctic Wolf Labs team came across a relatively recent Indonesian-based hacktivist collective calling themselves “INDOHAXSEC” that has been active within this region.

Arctic Wolf has recently observed a campaign in which threat actors are compromising widely used websites across various industries and embedding a fake CAPTCHA challenge. When victims visit the site, they are presented with the CAPTCHA challenge or redirected to a site that provides instructions, triggering PowerShell code execution and ultimately leading to the loading of information stealer malware.