Latest AI and Cyber Security news with Refract Digests—curated insights from trusted sources with BLUF summaries and actionable analysis. (56 articles)
CISA has updated its SBOM guidance with new field requirements to increase data comprehensiveness, though critics question if these changes actually improve risk management.
A couple dozen changes to SBOM fields will make them more comprehensive, but some argue that the framework lacks real risk-management improvements.
Security teams must prioritize creating a complete inventory of all certificates and keys to maintain control over their trust infrastructure. Without this visibility, losing a root of trust can leave organizations without ownership or control over their security posture.
The most valuable move any security team can make is building a certificate and key inventory.
Interpol is deploying a global system to help law enforcement stop fraudulent transactions faster. This initiative aims to freeze funds before cybercriminals can withdraw the money.
When a fraudulent transaction occurs, law enforcement agencies must work quickly to halt payments before cybercriminals cash out.
Unauthorized TV streaming sticks are hijacking your internet bandwidth and impersonating mobile devices to click fraudulent ads. Experts warn consumers to avoid these generic boxes to prevent becoming part of a larger cybercrime operation.
Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user'...
Switching from Flock to Axon license plate readers does not reduce privacy risks because both systems collect extensive personal data beyond vehicle plates.
Governments are switching, but I’m not sure it makes a difference: …some municipalities, including Denver, Colorado, are ditching their Flock arrays. But keep in mind that if they’re only switching fr...
Former Citigroup CISO Blauner shares insights on the changing CISO role, emphasizing AI's influence and the shift toward operational resilience as critical for future security leadership.
The cybersecurity pioneer discusses the evolution of the CISO role, AI's impact on careers, and why operational resilience is the profession's next frontier.
Adversaries utilized the autonomous Hermes AI tool in unrestricted mode to execute an espionage campaign against Thailand's Ministry of Finance.
Attackers used Hermes, an autonomous open source tool, in unrestricted "YOLO mode" to conduct espionage against Thailand's Ministry of Finance.
Yet another Israeli mass surveillance company: Made by Israeli surveillance company Cognyte, the tech simulates a mobile phone tower, which forces nearby phones to connect to it. That enables cops to ...
New vulnerabilities in AI-driven browsers allow attackers to bypass security controls through social engineering, effectively undermining modern web protections.
PleaseFix class of flaws makes it easy to socially engineer agentic browsers and highlights weaknesses in how they handle cross-origin requests.
Lower catch this year. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.