Zero Trust must be decentralized in cloud environments: trust decisions occur directly at identities, workloads, and data streams, no longer at central boundaries.
DriveSurge compromises thousands of legitimate websites to silently infect visitors with FakeUpdates or ClickFix manipulations via zTDS traffic steering and sells system access to other cybercriminals.
NIS2 violations are penalized with fines up to 10 million euros, which poses significant financial and operational consequences, particularly for mid-sized enterprises.
Attackers can inject malicious commands into messenger messages through fake context alignment, which Gemini processes undetected and uses to control authorized devices or misuse data.
Lockdown Mode restricts ChatGPT functions to prevent data exfiltration through prompt injection attacks and is being rolled out gradually to all user types.
NIS2 affects approximately 30,000 German companies and requires CISOs to implement new governance, risk management systems, and incident reporting obligations.
TA4922 expands from its focus on East Asia to Europe, deploying AI-powered malware and social engineering on messenger platforms to achieve financial gain.
Starting in 2025, 30,000 companies must implement NIS2 and DORA requirements, forcing CISOs to review their governance, incident management, and third-party dependency management.
Cyberattack on external billing service provider leads to data breach of health and personal data of nearly 2,800 patients at Mainz University Hospital.