Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Apple had to deal with another active security vulnerability. The company has recently issued emergency patches for iOS and iPadOS, which fixed CVE-2025-24200-an alarming zero-day flaw that might have allowed cybercrooks to disable USB Restricted Mode on locked devices. The purpose of the update is to ward off possible cyber-physical attacks and keep data from unauthorized extraction.

As organizations worldwide race to transform themselves digitally in a cloud-first world, many are doing so to the detriment of their businesses by failing to assess the security risks posed by their cloud applications and services. This oversight is not only a security issue but a core business risk that differentiates market leaders from those who are sure to face expensive setbacks and regulatory headaches.

Continuous monitoring helps organisations to detect and respond to threats in real-time. It’s crucial for protecting against data breaches and ensuring system integrity. This article explains what continuous monitoring is, it’s importance and features, and best practices of continuous monitoring to strengthen your cybersecurity.

The evolution of artificial intelligence has been rapid thus far. By 2030 the AI market is projected to reach $1.81 trillion. Technology supported by AI has been useful in many areas of life such as education, healthcare, or finance. That is reflected by the rate of AI adoption by organizations being 72% (2024). Even if you just look around you – many people use tools like ChatGPT for daily life or work, AI helps with email management or studying. What do these advancements in AI bring to DevOps?

Zeek is a powerful open-source network analysis tool that allows users to monitor traffic and detect malicious activities. Users can write packages to detect cybersecurity events, like this GitHub repo that detects C2 from AgentTesla (a well-known malware family). Automating summarization and documentation using AI is often helpful when analyzing Zeek packages.

APIs present a security risk—that much is a given. Attacks on APIs have caused some of the most significant security incidents of the past decades. But the question now is: How can we flip the script and leverage their power to enhance security? Bybit might just have the answer. Bybit—one of the world’s leading cryptocurrency exchanges— recently leveraged the power of an API in the wake of a devastating security breach that resulted in a staggering $1.5 billion loss.

As we stand on the brink of the agentic AI revolution, it’s crucial to understand the profound impact AI agents will have on how people, applications and devices interact with systems and data. This blog post aims to shed light on these changes and the significant security challenges they bring. It’s important to note that given the rapid pace of advancements in this field, we could not have anticipated many of the challenges discussed here just a few months ago.

Zimperium warns of a surge in phishing attacks specifically tailored for mobile devices. These attacks are designed to evade desktop security measures in order to breach organizations through employees’ smartphones. Mobile phishing includes SMS phishing (smishing), QR code phishing (quishing), voice phishing (vishing), and mobile-targeted email phishing.