38 percent of workers share sensitive data without permission


Sharing is caring so the saying goes, but that shouldn't apply quite so much when applied to sensitive data. A new report from CybSafe shows 38 percent of employees admit to sharing sensitive information without the knowledge of their employer.
The study of over 7,000 individuals across the United States, UK, Canada, Germany, Australia, India and New Zealand, reveals workers are more connected than ever, with 53 percent of participants stating they're always online.
New AI-driven platform simplifies enterprise access management


Traditional processes for ensuring employees have the right levels of access to systems have come under strain and become harder to manage because of the spread of cloud-based software.
A new AI-powered identity governance and administration (IGA) platform from Zilla Security aims to tackle the long-standing challenge of managing hundreds of roles or group membership rules to ensure organizations give users job-appropriate access.
Unforgiving consumers says poor software is as bad as contaminated food


A new survey from software delivery platform Harness finds that 66 percent of UK consumers think software companies releasing 'bad' code that causes mass outages is on par with, or worse than, supermarkets selling contaminated products that break laws on food safety.
The study of 2,000 UK consumers, conducted by Opinium Research, finds that 44 percent have been affected by an IT outage. 26 percent were impacted by the recent incident caused by a software update from CrowdStrike in July 2024.
Enterprises suffer surge in mobile phishing attacks


Cybercriminals are increasingly adopting a 'mobile-first' attack strategy to infiltrate enterprise systems by targeting weak, unsecured, and unmanaged mobile endpoints, recognizing mobile as a major entry point to corporate networks and sensitive data.
A new report from Zimperium zLabs shows a significant rise in mobile phishing -- or 'mishing' -- a technique that employs various tactics specifically designed to exploit vulnerabilities in mobile devices.
Can humans provide a cybersecurity edge? [Q&A]


It's usually the case that cybersecurity is seen as being all about technology and that humans -- making mistakes and falling for social engineering -- are something of a liability.
But are people really just a problem or can they also be part of the solution? Toney Jennings, CEO of DataStone, believes we need to shift our thinking away from the current paradigm to empowering people as a hidden asset in the protection of their organization. We talked to him to find out more.
Attackers use GenAI to write malicious code


The latest threat insights report from HP Wolf Security has identified a new campaign using malware believed to have been written with the help of GenAI.
Analysis of the campaign, targeting French-speakers using VBScript and JavaScript, finds the structure of the scripts, comments explaining each line of code, and the choice of native language function names and variables are strong indications that the threat actor used GenAI to create the malware.
Phishing and deepfakes are leading AI-powered threats


A new survey of cybersecurity professionals finds that 75 percent of respondents think phishing attacks pose the greatest AI-powered threat to their organization, while 56 percent say deepfake enhanced fraud (voice or video) poses the greatest threat.
The study from Team 8, carried out at its annual CISO Summit, also finds that lack of expertise (58 percent) and balancing security with usability (56 percent) are the two main challenges organizations face when defending AI systems.
Passwords still rule when securing user accounts


A new global study reveals that 58 percent of people use a username and password to login to personal accounts and 54 percent do so to login to work accounts.
The report from Yubico, based on a study of 20,000 people around the world carried out by Talker Research, reveals a worrying lack of awareness of best practices for authentication. 39 percent think username and password are the most secure and 37 percent think mobile SMS based authentication is the most secure, though both are highly susceptible to phishing attacks.
Social media could be good for your mental health


It's a pretty fair bet that if you asked most people they would skeptical about the effects of social media on well-being. However, new research from the Saïd Business School at the University of Oxford suggests there are positive benefits of social media usage on adults' mental health.
Academics conducted a six-month study of 1029 adults, with participants' daily time using social platforms on their Android mobile device unobtrusively tracked and their well-being measured every two weeks.
Dark web exposure increases risk of attack


The presence of any data relating to an organization on the dark web demonstrably increases its risk of a cyberattack.
This probably won't come as too much of a surprise but it's confirmed by new research from Searchlight Cyber, the dark web intelligence company, and the Marsh McLennan Cyber Risk Intelligence Center.
New ethical hacking qualification aims to deliver skills to tackle cybercrime


A new qualification aims to equip cybersecurity professionals with the skills needed to tackle cybercrime in the age of AI.
Certified Ethical Hacker CEH v13 from EC-Council, a leader in cybersecurity certification, education, and training, provides in-depth training by integrating AI into all five phases of ethical hacking, from reconnaissance and scanning to gaining access, maintaining access, and covering tracks.
Tackling the business threat posed by deepfakes [Q&A]


AI has become an undeniable and powerful part of the digital landscape. It makes systems stronger and more automated -- but it also has the potential to present a threat.
Some 80 percent of executives believe deepfakes pose a risk to their business, yet only 29 percent say they have taken steps to combat them. We spoke to Patrick Harding, chief product architect at Ping Identity, to discuss the security threats posed by AI and the need to take steps to properly secure identity by adding additional layers of protection.
Deepfake fraud is on the rise say business leaders


Over half of C-suite and other executives (51.6 percent) expect an increase in the number and size of deepfake attacks targeting their organizations' financial and accounting data in the next year.
A new Deloitte poll shows that increase could impact more than one-quarter of executives in the year ahead, as those polled report that their organizations experienced at least one (15.1 percent) or multiple (10.8 percent) deepfake financial fraud incidents during the past year.
84 percent of enterprises suffered security incidents in the last year


According to a new survey, 84 percent of organizations in the enterprise sector spotted a cyberattack within the last 12 months, compared to only 65 percent in 2023.
The study from Netwrix shows the most common security incidents are phishing, user or admin account compromise, and ransomware or other malware attack.
CIOs need to anticipate future business challenges


The latest tech trends report from Info-Tech Research Group suggests that that CIOs will need to increasingly adopt forward-thinking strategies to anticipate and simulate future business scenarios.
"At the intersection of digital transformation and exponential AI growth, IT leaders are
entering a new era where forecasting probable futures will be just as critical as reporting on the past," says Brian Jackson, principal research director and lead author of the report. "Our 2025 Tech Trends report provides a roadmap for organizations to harness AI, quantum computing, and cybersecurity solutions to stay ahead of the curve."
Ian's Bio
Ian spent almost 20 years working with computers before he discovered that writing about them was easier than fixing them. Since then he's written for a number of computer magazines and is a former editor of PC Utilities. Follow him on Mastodon
© 1998-2025 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.