FlowFinance

Why Browser Extensions Are Your New Attack Surface

Browser extensions have become the new attack surface - stealing credentials, hijacking sessions and evading detection - yet most enterprises lack the controls to

Trellix Discloses Source Code Hack

Trellix disclosed over the weekend that hackers found their way to its source code repository. The company said that investigation so far turned up "no

Study: Off-the-Shelf LLMs Not Ready for Clinical Prime Time

General purpose large language model chatbots are getting better at coming up with patients' final diagnoses but are still weak in clinical reasoning, including

Rapid7 Names Wael Mohamed CEO Amid Ongoing Growth Struggles

Rapid7 has appointed former Forescout CEO Wael Mohamed as chief executive, betting that a renewed focus on AI-driven security operations can revive growth and

Privilege Blind Spots: Part 2, Eliminate Unseen Workforce...

Human identities are at the center of today’s most damaging breaches. Privilege now extends beyond IT administrators to developers, cloud teams, data teams, and

Pentagon Piloting Skills-Based Assessments for Cyber Workers

The U.S. Department of Defense is for the first time piloting new skills-based assessments for its cyber hiring as an alternative to checking paper qualifications.

page 42

page 42

page 2

page 2

Oncology Firm Says Vendor Hack Compromised Patient Data

A publicly traded cancer treatment firm notified investors that a yet-undisclosed number of patients' information was compromised in a 2025 cybersecurity incident

Oasis Raises $120M Series B to Safeguard Agentic Identities

Oasis Security has raised $120 million in a Series B round to expand its identity platform focused on non-human identities and AI agents. CEO Danny Brickman says

New AI Model Aims to Transform Behavioral Health

A new AI-powered large health behavior model could help detect mental health and substance use risks before crises occur, said Nick Allen of Ksana Health, which is

Medical Device Maker Medtronic Says It's Been Hacked

Medtronic has told federal authorities that cybercriminals hacked its corporate IT systems, but said the incident did not affect the medical device makers'

Mass. Hospital Diverting Ambulances as It Deals With Attack

A Massachusetts healthcare system is diverting ambulance patients and is operating under downtime procedures as it deals with a cyberattack. The organization has

Malware-Laced USBs Breach Japanese Military Networks

Counterfeit flash drives embedded with a Chinese-linked computer virus and used by the Japanese army are now dispensing malware throughout other secure networks in

Inside the Growing 'Cyber Invasion' Targeting the US

Leslie Beavers, retired brigadier general and former acting CIO and principal deputy CIO of the Department of Defense, said the United States is already

Identity Is the New Control Plane in the AI Era

Identity is increasingly the gateway into modern enterprises, and attackers know it. Rakesh Shah of Semperis explores the surge in non-human identities, the

Cyber Risk Contracts Have Become the Weakest Link

As organizations outsource more crown jewels to third-party vendors and silently roll out artificial intelligence tools, the old playbook of contracts and one-time

CISA Town Halls Set Final Stage for CIRCIA Debate

The Cybersecurity and Infrastructure Security Agency's June town halls will give critical infrastructure operators a final opportunity to influence how the agency

AI Shifts Cybersecurity's Focus to Rapid Remediation

As AI transforms vulnerability discovery and exploitation, security teams must prioritize the small number of flaws that truly matter and fix them faster than ever,

AI Safety Benchmarks Don't Account for Tenacity

Probe beneath the typical benchmarks measuring frontier artificial intelligence model security and suddenly the systems appear much less safe, warn researchers from

AI and Medical Device Cybersecurity: The Good and Bad

AI-fueled tools can help to identify medical device vulnerabilities much faster and at a higher volume than more traditional tools. But can device manufacturers and

Agentic AI's Blind Spot Is Control, Not Trust

Many organizations don't know how many AI agents are running on their networks or what those agents are doing. Christian Reilly, field CTO at Cloudflare, says

About

FlowFinance

Decode the world of financial deception. Learn about credit card cloning, prepaid cards, and scamming forum secrets in our deep-dive fraud encyclopedia.