News and Articles

A phishing campaign exploits a loophole in Google’s email authentication, allowing attackers to send convincing DKIM-signed emails from fake accounts. These emails, often appearing alongside real notifications, lead to fraudulent login pages. Google is aware and has implemented fixes while urging users to use two-factor authentication for enhanced security. ...

Phishers are exploiting Google’s OAuth framework to send DKIM-authenticated spoofed emails, tricking users into interacting with fake pages. Meanwhile, Microsoft Entra ID experienced widespread user lockouts due to a faulty rollout of the MACE Credential Revocation feature, leading to confusion without signs of hacking. ...

Software keygens create valid license keys to circumvent piracy protections by reverse engineering key generation algorithms. Companies counteract this through online activation, digital signatures, encryption, and frequent updates. While keygens can generate keys quickly by mimicking the validation process, measures like hardware-based licensing enhance security against unauthorized use. ...

The CVE program, crucial for global cybersecurity, faces upheaval due to MITRE's contract expiration. Concerns arose over vulnerability tracking fragmentation and response difficulties. A new nonprofit, the CVE Foundation, was established to sustain operations independently. Meanwhile, MITRE secured short-term funding, ensuring temporary continuity amidst significant structural changes in cybersecurity management. ...

On March 15, the White House concluded a public comment period on its upcoming AI Action Plan. The Office of Science & Technology Policy (OSTP), alongside the National Science Foundation’s Networking and Information Technology Research and Development (NITRD) office, had issued a formal Request for Information (RFI) in February as required by President Trump’s AI ...