Chinese-sponsored groups are using the popular Brickstorm backdoor to access and gain persistence in government and tech firm networks, part of the ongoing effort by the PRC to establish long-term footholds in agency and critical infrastructure IT environments, according to a report by U.S. and Canadian security offices.

The post China Hackers Using Brickstorm Backdoor to Target Government, IT Entities appeared first on Security Boulevard.

Elon Musk’s X became the first large online platform fined under the European Union’s Digital Services Act on Friday.

The European Commission announced that X would be fined nearly $140 million, with the potential to face “periodic penalty payments” if the platform fails to make corrections.

A third of the fine came from one of the first moves Musk made when taking over Twitter. In November 2022, he changed the platform’s historical use of a blue checkmark to verify the identities of notable users. Instead, Musk started selling blue checks for about $8 per month, immediately prompting a wave of imposter accounts pretending to be notable celebrities, officials, and brands.

Read full article

Comments

© NurPhoto / Contributor | NurPhoto

A threat group dubbed ShadyPanda exploited traditional extension processes in browser marketplaces by uploading legitimate extensions and then quietly weaponization them with malicious updates, infecting 4.3 million Chrome and Edge users with RCE malware and spyware.

The post ShadyPanda’s Years-Long Browser Hack Infected 4.3 Million Users appeared first on Security Boulevard.

AI browsers introduce reasoning-based risks. Learn how cross-origin AI agents dismantle web security and what defenses are needed.

The post Convenience or Catastrophe? The Dangers of AI Browsers No One is Talking About  appeared first on Security Boulevard.

Veza Security was recently valued at more than $800 million after raising $108 million in Series D funding.

The post ServiceNow to Acquire Identity Security Firm Veza in Reported $1 Billion Deal  appeared first on SecurityWeek.

Cisco Security and Splunk secured the GovWare 2025 network in the Security Operations Centre. Learn about the latest innovations for the SOC of the Future.

At GovWare 2025, the team leveraged Splunk Attack Analyzer's API to connect to Endace.

During GovWare, Cisco XDR detected 39 incidents. The SOC team conducted analysis and response actions, and reported critical incidents to the GovWare NOC.

At GovWare 2025, the SOC team combined ES with Splunk SOAR to fully automate and track the incident response process.

Cisco provided a splash page for GovWare 2025, a click-through captive portal. Learn how the team did it.

Learn about the "SOC in a Box" hardware refresh the team deployed for GovWare 2025.

At GovWare 2025, the SOC team observed ECH activity. Learn more about this and how it impacted security.

At GovWare, we showcased a proof of concept built on Cisco's Foundation AI model on Hugging Face.

Secure Access served as the primary method of securing DNS-layer traffic for the GovWare 2025 Security Operations Centre (SOC).

The Swiss cybersecurity firm will scale its R&D, sales and marketing teams as it pursues expansion across Europe.

The post Saporo Raises $8 Million for Identity Security Platform appeared first on SecurityWeek.

Two technologies — one for public safety, one for controlled entry — show why trust in facial recognition must be earned, not assumed.

The post Facial Recognition’s Trust Problem appeared first on SecurityWeek.

The Philips 4200 and 4000 Series smart deadbolts are no longer the traditional lock-and-key mechanisms. Rather, they are access hubs for the modern home.

The post A key to a safer, smarter home: how Philips Home Access is redefining the front door appeared first on Digital Trends.

The FBI says that account takeover scams this year have resulted in 5,100-plus complaints in the U.S. and $262 million in money stolen, and Bitdefender says the combination of the growing number of ATO incidents and risky consumer behavior is creating an increasingly dangerous environment that will let such fraud expand.

The post FBI: Account Takeover Scammers Stole $262 Million this Year appeared first on Security Boulevard.

According to the Thales Consumer Digital Trust Index 2025, global confidence in digital services is slipping fast. After surveying more than 14,000 consumers across 15 countries, the findings are clear: no sector earned high trust ratings from even half its users. Most industries are seeing trust erode — or, at best, stagnate. In an era..

The post The Trust Crisis: Why Digital Services Are Losing Consumer Confidence appeared first on Security Boulevard.

The Russian state-sponsored group behind the RomCom malware family used the SocGholish loader for the first time to launch an attack on a U.S.-based civil engineering firm, continuing its targeting of organizations that offer support to Ukraine in its ongoing war with its larger neighbor.

The post Russian-Backed Threat Group Uses SocGholish to Target U.S. Company appeared first on Security Boulevard.