The Cybersecurity and Infrastructure Security Agency (CISA) issued Binding Operational Directive 26-04: Prioritizing Security Updates Based on Risk that directs federal civilian agencies to assess...
Decades of piling complexity onto non-standardized stacks have left security unsteerable. Juan Andrés Guerrero-Saade makes the case for a new approach.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) published a Binding Operative Directive requiring federal civilian agencies to... The post CISA BOD 26-04 directs agencies to...
DNV has been selected to provide cybersecurity services for the Santiago de los Caballeros monorail project in the... The post DNV selected to secure Dominican Republic’s first monorail with rail...
Software supply chain security company NetRise announced this week the launch of its Discovery Partner Program, a partner-first... The post NetRise launches Discovery Partner Program to strengthen...
The SANS Cyber Workforce Academy has opened applications for an expanded Maryland training program that now includes dedicated... The post SANS expands Maryland cyber workforce program with new...
The new open-source project could serve as the basis for a future of apps with features as complex as Slack, Discord, or Google Docs—but with added protection against surveillance.
Law enforcement has dismantled the “AudiA6” cryptocurrency service allegedly used by ransomware actors and other cybercriminals to launder more than $380 million. [...]
Path Traversal vulnerability (CVE-2026-8464) has been found in Golem OEE MES software.
GitHub has announced what it said are "breaking changes" coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes aim to...
The surveillance company Leonardo wants more data: A surveillance company plans to add sensors to automatic license plate readers (ALPRs) that would mean the devices, as well as capture the...
Protect enterprise AI agents from supply chain risks by auditing third-party skills for hidden vulnerabilities and multi-stage attack chains. The post Trust No Skill: Integrity Verification for AI...
AI-driven attacks are exposing the limits of fragmented MSP security stacks and slow response workflows. Kaseya breaks down why integrated security, automation, and recovery are becoming essential. [...]
How privileged access controls help you stay ahead of AI-driven vulnerability discovery
The CEO thought this was the best way to deal with some email issues
The Personal Information Protection Commission (PIPC), South Korea's data protection regulator, has fined e-commerce giant Coupang a record 624.6 billion won (roughly $409 million) following a...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced a new Binding Operational Directive, 26-04, that prioritizes security updates for Federal Civilian Executive Branch...
A shift in operational pattern of the infamous Vietnam-aligned APT group
Executive Summary The People's Republic of China (PRC) represents the most significant long-term cyber threat to defense-aligned and enterprise organizations. PRC-linked threat groups are...
„Late last night, we received information from the head of the State Accreditation Service for Health Care Activities regarding a cyber incident that had been contained in the information...
Great Marlow School in Buckinghamshire said a malware incident had affected its ICT network, prompting staff to shut down parts of the system as a precaution while an investigation is carried out....
Microsoft has resolved a known issue causing some Windows Server 2025 devices to boot into BitLocker recovery after installing the April 2026 security update. [...]
The University of Nottingham confirmed on Wednesday that a hacking group gained access to its student records system in a breach affecting both current students and alums. [...]
Attackers are now targeting a recently patched maximum-severity flaw in Ivanti Sentry, enabling them to execute code with root privileges on Internet-exposed secure mobile gateways. [...]
PRC eyes are watching you
Discover how Iranian and Russian shadow fleets use a vast network of fake maritime websites and fraudulent documents to evade international sanctions
See the business value of your intelligence program in one live, continuously updated dashboard, built for the conversations that matter most with the executives who own budget and strategy.
In June 2026, the University of Nottingham was the target of a cyber attack, later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published...
Cybersecurity researchers have warned of a "resurgence and expansion" of JDY, a covert network associated with China-nexus state-sponsored threat actors. "The JDY botnet comprises over 1,500 SOHO...
“Defenders cannot afford to take weeks to patch,” one Cybersecurity and Infrastructure Security Agency official warned on Wednesday.