Data exfiltration stories

SquareX wins the 2025 SINET16 Innovator Award for its pioneering browser security solution protecting organisations from advanced web-based cyber threats.

As AI reshapes cyber defence, organisations adopt transparent, AI-driven tools to combat surging attacks and complex digital threats worldwide.

Panaseer reveals 70% of major cyber breaches stem from toxic combinations of minor risks compounding, causing greater vulnerabilities and severe consequences.

Ransom payments fell to a historic low of 23% in Q3 2025 as cyber extortion tactics shift towards targeted, costlier attacks on larger firms.

Despite high confidence in ransomware readiness, 55% of ANZ firms struggle with slow recovery, lagging behind UK and US in rapid ransomware response.

Identity, not networks, is now cyber security's front line, with AI agents and privilege misuse posing rising risks in cloud-first businesses.

Proofpoint reveals how weaponised OAuth apps enable hackers to maintain cloud access despite password resets and MFA, threatening persistent account takeover.

F5 has suffered a major breach exposing BIG-IP source code and security flaws, raising global risks amid limited evidence of exploitation so far.

The National Cyber Security Centre warns China among top cyber threats as UK sees a 50% rise in major cyber-attacks, with serious incidents nearly every two days.

Cyberattackers exploit AI tools, deepfakes and software flaws like Chrome extensions and Redis to breach enterprise systems and threaten executives.

Vietnamese threat actor BatShade targets job seekers with malware disguised as recruitment documents, using new tactics for stealth and persistent infection.

Tenable exposed three critical flaws in Google’s Gemini suite enabling unseen theft of sensitive user data, now patched by Google to prevent exploitation.

Phantom Taurus, a new Chinese state-backed group, targets governments and telecoms in Africa, the Middle East, and Asia with advanced espionage tools and tactics.

Researchers uncovered three critical flaws in Google's Gemini AI that risked sensitive data theft by exploiting AI platform behaviour, now fixed by Google.

Security flaws in Google’s Gemini AI exposed millions to unseen data breaches by enabling attackers to manipulate logs, search history and browsing tools.

Elastic Security earned Certified status with a 99.3% effectiveness rate in AV-Comparatives’ 2025 Endpoint Prevention and Response test, outperforming major rivals.

Obsidian Security launches AI agent security to monitor and control autonomous AI risks in SaaS, addressing blind spots in cloud app data access and permissions.

AppOmni and Cribl join forces to enhance SaaS security, offering improved visibility and data control to counter evolving cyber threats like UNC6395 attacks.

Radware revealed ShadowLeak, a zero-click flaw letting attackers silently steal data from ChatGPT's AI agents on OpenAI servers, risking millions of business users.

Radware warns that autonomous AI agents in businesses expand cyber risk, urging stricter security as these systems create complex, hard-to-track attack pathways.