September 11, 2001, is one of those rare days by which we measure the arc of history: life as it was before, and life as it became after. Few places reveal that divide more clearly than the...
The September 11 attacks changed the approach to security for any place where large numbers of people gather, whether a transportation hub, office building, sporting venue or university campus....
The provision of safe and reliable drinking water and wastewater is critical for society to function. The water sector is one of the critical infrastructure sectors as safe and reliable drinking...
Twenty-five years ago, the health sector’s cyber threat landscape was relatively rudimentary. In 2001, hospital IT departments were primarily concerned with keeping electronic medical records...
September 11, 2001, reshaped the foundational architecture of American national security. While immediate policy shifts focused on aviation, intelligence and border control, an equally profound...
Financial crime investigations have been an important element of criminal investigations throughout U.S. history. The Secret Service was founded in 1865 to combat the threat of counterfeit U.S....
The new joint operation uses laser-based technology capable of detecting, tracking, and disabling commercial drones linked to human and drug trafficking.
In other news: South Korea raises the breach fine level; three Turkish ministers targeted with spyware; CISA is ready to hire 250 staff.
Everyone from ShinyHunters to Russian freelancers is in on the illicit model fun
Agentic investigation is the shift your SOC could never staff. Here is how the always-on AI, the evolved analyst, and the expert on call now fit together.
A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a...
War is peace. Freedom is slavery. Privacy is surveillance
Human operator: don't touch CIS orgs. AI agents: look a squirrel!
AL26-020 - Vulnerabilities Impacting MikroTik RouterOS - CVE-2026-67276, CVE-2026-67277 and CVE-2026-86060
Oleksii Lytvynenko joined the notorious group in 2021 and was directly involved in attacks on at least 12 companies. The post Conti ransomware crew member sentenced to four years in prison...
Bad actors are misusing Google Play's Early Access program to push deceptive apps that claim to offer money, rewards, casino winnings, and premium content. Early Access apps are apps that haven't...
The Republican lawmaker called OpenAI’s leadership decisions “reckless,” and used recent warnings about the existential risk of AI to bolster his inquiry. The post Hawley probes OpenAI over...
Wiz Research has identified active, in-the-wild exploitation of three critical and high-severity vulnerabilities impacting JFrog Artifactory (CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329)....
HPE security advisory (AV26-909)
In this week's Threat Source newsletter, Joe explores why the word "burnout" often fails to capture the true toll of working in the cybersecurity industry and why we need better language to address it.
WebPros security advisory (AV26-908)
Microsoft examines an AI-assisted business email compromise campaign that used executive impersonation and fake invoices to target finance teams with ACH payment fraud. The post Protecting...
U.S. lawmakers call for sanctions on hack-for-hire companies, citing Citizen Lab report. The post Group of Bipartisan Lawmakers Ask US Government to Ban Several Hack-for-Hire Firms appeared first...
Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an unauthenticated remote attacker...
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF...
The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered banking app inside it, security firm Group-IB said in a report...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog,...
See how Microsoft Defender detects and disrupts AI-themed phishing, malware, and multi-stage attacks across the attack chain. The post Detect and disrupt AI-themed attacks with Microsoft Defender...
Have I Been Pwned logs leaked records spanning patients, staff, and providers
With this integration, Rubrik users can now tap ReversingLabs' ransomware feed to decide whether each file in their backup is safe.