Cisco warns of actively exploited Secure Email Gateway flaw
A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers towrite arbitrary files on […]
Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix
Attackers are exploiting a newly disclosed flaw in Palo Alto Networks’ PAN-OS firewall software to run […]
Ransomware extortion gets personal as attackers target employees’ families
Ransomware attackers are expanding their tactics beyond encrypting corporate systems and threatening to leak stolen data. […]
As phishing-as-a-service goes industrial, Microsoft takes down a marketplace behind 1 billion messages
Microsoft says it has dismantled a criminal marketplace responsible for 1 billion malicious messages. Working with […]
How Claude Code’s 256KB blind spot put developers’ secrets in the preview pane
Simply asking Anthropic’s Claude Code to review an HTML file could hand attackers access to a […]
Top Deception Technology Solutions to Consider in 2027
Key Takeaways Deception platforms vary in focus, including identity protection, adversary intelligence, ransomware defense, and integrated […]
Hackers abuse the Ivanti Connect Secure bug to gain access without accounts
Attackers without an account of their own were found logging in to Ivanti Connect Secure appliances […]
Unplug your smart fridges, French supermarkets warned after cyberattack
More internet-connected refrigerators have joined the official list of those affected by a cyberattack that ruined […]
Cybersecurity is a leadership problem: Why the management model needs to catch up
When I started writing regularly about cybersecurity management in 2015, the environment looked very different. Cloud […]
AI agents aren’t ‘going rogue.’ Frontier labs are skipping security basics.
Since July, US frontier AI labs and other AI leaders have revealed a string of incidents […]