Month: April 2025

Meta on Tuesday announced LlamaFirewall, an open-source framework designed to secure artificial intelligence (AI) systems against emerging cyber risks such as prompt injection, jailbreaks, and insecure code, among others. The framework, the company said, incorporates three guardrails, including PromptGuard 2, Agent Alignment Checks, and CodeShield. PromptGuard 2 is designed to detect direct

 Security researchers have disclosed a critical vulnerability in Avast Free Antivirus that could allow attackers to gain elevated system privileges and execute malicious code with kernel-level access. The vulnerability, tracked…

 Verizon Business recently released its 2025 Data Breach Investigations Report (DBIR), revealing a disturbing trend in the cybersecurity landscape: third-party involvement in data breaches has doubled to 30% over the…

 Security researcher Nafiez has publicly disclosed a previously unknown vulnerability affecting Windows LNK files (shortcuts) that can potentially allow attackers to execute code remotely without user interaction. Despite releasing a…

A high court in the Indian state of Karnataka has ordered the blocking of end-to-end encrypted email provider Proton Mail across the country. The High Court of Karnataka, on April 29, said the ruling was in response to a legal complaint filed by M Moser Design Associated India Pvt Ltd in January 2025. The complaint alleged its staff had received e-mails containing obscene, abusive

 In the current software landscape, security breaches caused by untested or poorly tested code are both common and costly. While automated testing is often cited as a best practice, it…

 Cybersecurity in mergers and acquisitions is crucial, as M&A activities represent key inflection points for organizations, offering growth opportunities while introducing significant security challenges. In today’s threat landscape, cybersecurity has…

 In 2025, cybersecurity trends for CISOs will reflect a landscape that is more dynamic and challenging than ever before. The rapid pace of technological change, the proliferation of connected devices,…

 Zero-trust architecture has become essential for securing operations in today’s hyper-connected world, where corporate network boundaries have vanished and employees, cloud services, and data span multiple environments. This new reality…

 The Chrome team has officially promoted Chrome 136 to the stable channel for Windows, Mac, and Linux, marking a significant update for users across platforms. The rollout, which will occur…

Thousands of automatic tank gauge (ATG) devices are accessible over the Internet and are just "a packet away" from compromise, security researcher warns at 2025 RSAC Conference. Read More  

Marketing lesson from CISOs – Steve Morgan, Editor-in-Chief Sausalito, Calif. – Apr. 29, 2025 Who has the best cybersecurity name at the RSA Conference in San Francisco this year? It…

Making a case for empathy in cyber-leadership roles as a strategic business advantage. Read More  

Barbara Grofe, space asset security architect at Spartan Corp, discussed the realities of hacking in space, and the outlook is not pie-in-the-sky. Read More  

Popular messaging app WhatsApp on Tuesday unveiled a new technology called Private Processing to enable artificial intelligence (AI) capabilities in a privacy-preserving manner. "Private Processing will allow users to leverage powerful optional AI features – like summarizing unread messages or editing help – while preserving WhatsApp's core privacy promise," the Meta-owned service said in a