The Latest

• 

  In financial sector, vendors lag behind customers on cybersecurity

  Financial firms should be performing regular oversight of their vendors to avoid supply chain compromises, according to a new report.

  Strategy

• 

  Hackers targeting Cisco IOS XE devices with BadCandy implant

  Security researchers and Australian authorities warn that exploitation activity is ongoing.

  Updated Nov. 5, 2025

  Vulnerability

• 

  AI-based malware makes attacks stealthier and more adaptive

  Google says it has discovered at least five malware families that use AI to reinvent themselves and hide from defenders.

  Cyberattacks

• 

  Researchers warn of flaws that allow manipulation of Microsoft Teams messages

  A report by Check Point shows hackers could forge identities and alter messages.

  Vulnerability

• 

  AI risks pack a punch, but governance provides a buffer

  Enterprises strengthen governance and focus on responsible practices as more than 3 in 5 suffer AI risk-related losses of more than $1 million, EY data shows. 

  Strategy

• 

  Identity-based attacks need more attention in cloud security strategies

  Companies should lock down user accounts and scan for compromised credentials, according to a new report.

  Strategy

• 

  Cybercrime groups team with organized crime in massive cargo theft campaigns

  Financially motivated hackers are abusing remote monitoring and access tools against trucking and freight companies, Proofpoint warns.

  Updated Nov. 3, 2025

  Cyberattacks

• 

  Security leaders say AI can help with governance, threat detection, SOC automation

  Executives and technical leaders differ on AI priorities, according to a report from Amazon.

  Strategy

• 

  Windows Server Update Service exploitation ensnares at least 50 victims

  Researchers say hackers could be gathering intelligence for future attacks, and authorities warn users to apply patches and check for compromise.

  Vulnerability

• 

  CISA, NSA unveil best-practices guide to address ongoing Exchange Server risks

  The guide follows CISA’s warnings in August about a high-severity vulnerability in Microsoft Exchange.

  Strategy

• 

  FCC will vote to scrap telecom cybersecurity requirements

  The commission’s Republican chair, who voted against the rules in January, calls them ineffective and illegal.

  Updated Oct. 31, 2025

  Strategy

• 

  CISA updates guidance and warns security teams on WSUS exploitation

  The agency urges users to apply emergency patches from Microsoft to counter a serious threat.

  Vulnerability

• 

  Canadian authorities warn of hacktivists targeting exposed ICS devices

  Hackers have manipulated critical components at water utilities, oil and gas facilities, and agricultural sites in recent weeks.

  Updated Oct. 31, 2025

  Cyberattacks

• 

  AI adoption outpaces corporate governance, security controls

  Security and business leaders warn that companies are accelerating their use of agentic AI beyond the ability to maintain proper guardrails. 

  Vulnerability

• 

  F5 expects nation-state hack to curb revenues

  The company says it could lose new deals because of the intrusion.

  Breaches

• 

  Google probes exploitation of critical Windows service CVE

  Researchers have traced the threat activity to a newly identified hacker, while separate evidence points to more than one variant.

  Vulnerability

• 

  Conduent says data breach originally began with 2024 intrusion

  The cyberattack, which affected several state agencies, has also impacted multiple insurance providers.

  Breaches

• 

  UN member states sign cybercrime agreement despite industry, activist opposition

  Critics say the new convention is ripe for abuse by authoritarian countries.

  Cyberattacks

• 

  Hackers exploiting critical vulnerability in Windows Server Update Service

  Microsoft has issued an out-of-band update and is urging users to immediately apply the patch.

  Updated Oct. 27, 2025

  Vulnerability

• 

  Opinion

  Gartner: How to prepare for and respond to today’s evolving threat landscape

  With the emergence of AI, security operations teams must navigate a fast-moving generation of cyber threats.

  Cyberattacks

• 

  North Korea led the world in nation-state hacking in Q2 and Q3

  Security leaders should prioritize anomalous-activity detection and zero-trust principles, a new report recommends.

  Breaches

• 

  Researchers warn of critical flaws in TP-Link routers

  No active exploitation has been spotted, but the vendor and researchers advise users to apply updates immediately. 

  Vulnerability

• 

  Financial services tech leaders tackle agentic AI governance

  Operating in a risk-averse industry, IT decision-makers are helping their businesses adapt to emerging threats without derailing momentum.

  Strategy

• 

  Burned-out security leaders view AI as double-edged sword

  As companies face cybersecurity skills gaps and broader attack surfaces, they’re warily turning to AI-powered automation.

  Strategy

• 

  Climbing costs, skills loss and other AI warnings for CIOs

  Amid seismic change for IT leaders, enterprises need to curate survival kits to mitigate reliability and cost challenges, Gartner analysts said. 

  Strategy

More stories