Internet Security stories

Team Cymru unveils Total Insights Feeds, a single-stream threat intelligence framework blending internet-wide scoring, context and automated risk tagging.

Upwind taps former Facebook security chief Joe Sullivan to bolster cloud and AI strategy as it eyes enterprise buyers and rapid growth.

Gcore warns DDoS attacks hit 1.3 million in late 2025 as brief, high-volume floods and longer app assaults expose more sectors to risk.

APAC cybercrime climbs as synthetic identity fraud accelerates, with desktop-browser attacks, login pressure and bot activity fuelling losses.

Keitaro ad tracker abused in 15,500 scam and malware domains, as fraudsters cloak AI-themed investment lures from security watchdogs.

Spoofed AI agents are hammering major websites with billions of hidden requests, driving up costs and outpacing current security defences.

AI-driven botnets fuel eight million DDoS attacks in late 2025, as multi-vector assaults hit 30 Tbps and strain global critical services.

Norton launches Genie scam assistant in ChatGPT, letting users tag @Norton to analyse emails, texts, images and links for fraud risks.

Scammers hijack Israel-Iran war headlines for classic advance-fee email cons, security researchers warn, urging users not to respond.

Phishing gangs abuse .arpa DNS and IPv6 tunnels to hide brand-impersonation scams in core internet plumbing that most defences ignore.

ExpressVPN debuts a Meta Quest VR app and hybrid browser extension, offering switchable browser-only or full-device VPN protection.

AI pentesting tool uncovers 'SvelteSpill' bug in default SvelteKit apps on Vercel, exposing cached private data before a platform fix.

WatchGuard reports a 1,548% surge in new evasive malware and a 2,000% jump in encrypted threats, straining signature-based defences.

Cyber experts warn Valentine's Day brings a surge in romance and shopping scams, urging users to be wary of links, apps and payment requests.

Study finds over 28,000 fake domains mimicking top global sites, exposing users to rising phishing, malware and industrial-scale squatting.

cside launches browser-based AI Agent Detection toolkit, helping businesses spot agentic traffic and tailor site experiences in real time.

DigiCert warns Q4 internet traffic stayed high as DDoS and app-layer attacks grew longer and more intense, eroding traditional peak seasons.

Sophos has launched Workspace Protection, a browser-led suite to simplify securing hybrid work, SaaS access and shadow AI use at scale.

Corsearch has launched CVAN, an AI-driven network that spots suspect listings across 1,500 marketplaces before counterfeit goods go live.

Infoblox agrees to buy AI-driven threat hunter Axur, aiming to curb phishing and brand abuse beyond the traditional network perimeter.