The lost joy of music piracy

The Risk An organization that filters email has reduced the volume of known-bad content reaching its users. It has not built detection readiness.Detection readiness is the capability to identify messages that create a credible path to compromise even when those messages do not match any known-bad signature, reputation entry, or pattern rule. The threats that…

In this article Microsoft Threat Intelligence has identified a malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI to trick unsuspecting users into installing it. Based on our observation of the extension’s behavior, we assess its primary objective to be search traffic interception and data collection, which might enable downstream use cases such…

We have made real progress in software supply chain security, improving visibility into software components, authenticity and build integrity. Much of this progress traces back to Executive Order 14028, which pushed agencies, contractors and enterprises to invest in SBOMs, signing and provenance. All of that matters, but it is not enough. The current software trust…

This month, we celebrate 36 years of EFF and a mission that is bigger than any one of us. Thanks to EFF, communities around the world are demanding that technology protects their freedom, advances justice, and opens doors to opportunity. That’s not a small thing—it’s a life’s work worth continuing. If you are committed to…

Microsoft’s cybersecurity business is developing more artificial intelligence (AI) security products, cutting back on some of its more traditional security products, and consolidating engineering teams, which has led to several hundred layoffs, The Information reported Wednesday (July 15), citing unnamed sources. The company is making these changes to better respond to customer demand for solutions to…

Adobe’s ColdFusion platform is back in the headlines, and not for a good reason. On Adobe quietly patched nine critical flaws across ColdFusion and Campaign Classic on June 30, 2026, including CVE-2026-48282, a path traversal bug that scores 10.0 [1][2].0 on the CVSS scale. Attackers didn’t wait long to notice. Within roughly two hours of…