Cybersecurity leaders and practitioners brought their burning AI cybersecurity questions to EXPOSURE 2026. They left with clear answers and a blueprint for building an exposure management program....
Researchers at Check Point Research detailed that the Iranian Islamic Revolutionary Guard Corps (IRGC)-affiliated threat actor known as... The post IRGC-linked Nimbus Manticore group attacks...
AI governance requires visibility into how AI tools interact with enterprise data. Varonis explains how its Atlas platform uses Claude Compliance API data to help monitor usage, investigate risk,...
There’s a smarter, easier pathway to resilient security
Cyber-physical systems (CPS) protection company Claroty announced an integration with Corsha, a Machine Identity Provider (mIDP). The collaboration... The post Claroty and Corsha integrate OT...
Building on nearly a decade of development, not-for-profit organization MITRE is contributing Caldera to the Apache Incubator as... The post MITRE moves Caldera cybersecurity platform to Apache...
As Americans stew over the looming risk of job-stealing AI and data centers in their back yards, the feds are raising the alarm about a new category of threat, documents obtained by WIRED show.
The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compromise
Microsoft is testing a new Defender for Endpoint capability that will automatically isolate compromised endpoints to thwart attackers' attempts to move laterally across the network. [...]
IT teams often need to jump between monitoring dashboards, infrastructure tools, ticketing systems, and communication platforms during network incidents. This webinar explores how automation and...
See how session hijacking reshaped cyber threats. Learn how stolen tokens enable rapid breaches, bypass security, and impact enterprise protection.
See how session hijacking reshaped cyber threats. Learn how stolen tokens enable rapid breaches, bypass security, and impact enterprise protection.
CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection vulnerability in the Drupal content management system (CMS) that it flagged as...
Microsoft has confirmed a new known issue affecting Windows Server 2016 systems that causes domain controller lookups to fail after installing the KB5087537 May 2026 security update. [...]
The ShinyHunters extortion gang stole the personal information of over 183,000 people after hacking the systems of convenience store chain giant 7-Eleven in April, according to data breach...
Monday recap. Same mess, new week. A sketchy dev tool got people pwned, old bugs came back from the dead, and security products somehow needed protecting from themselves. A bunch of companies...
Threat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks. According to QiAnXin XLab, the...
Ask a cybersecurity pro about Network Detection and Response (NDR) and you might still hear "Noisy," "Too much data." But ask the teams running NDR that includes agentic AI capabilities and you'll...
Senior research associate Kate Robertson discusses the risks Bill C-22 poses for future data-sharing agreements with foreign law enforcement agencies. The post Trump Wants to Tap Your Phone....
A ‘geeks first, PR people second’ mentality, A-list reporters, and the forces shaping the cyber media landscape today
Improper Certificate Verification vulnerability (CVE-2026-9058) has been found in Szafir SDK software.
Cybersecurity researchers have shed light on a cross-platform malware called RemotePE that has been put to use by the North Korea-linked Lazarus Group in attacks targeting financial and...
cPanel security advisory (AV26-508)
Red Hat security advisory (AV26-507)
[Control systems] CISA ICS security advisories (AV26–506)
Dell security advisory (AV26-504)
Ubuntu security advisory (AV26-505)
Researcher Isiah Jones published a broader ‘Security Methodology’ initiative that consolidates projects such as ICSOTPentest, AIpentest 3.1, AI-driven... The post AI-powered penetration testing...
Roundcube security advisory (AV26-503)
Written by: Jamie Collier While Russian-speaking threat actors have historically dominated the phishing-as-a-service (PhaaS) landscape, a rival ecosystem is rapidly growing within the...