The Latest
-
Healthcare breaches double as shadow AI, vendor risks proliferate
A new report paints a picture of a sector with limited confidence in its defensive capabilities.
-
Majority of hedge funds boosted cybersecurity spending in 2025
About half of firms suffered a breach, and a large percentage cited third-party risks.
-
Executives worry most about cyber-enabled fraud, geopolitics and AI
The World Economic Forum’s wide-ranging new report also found strong global support for cyber regulation.
-
Critical vulnerability found in n8n workflow automation platform
The open-source platform is widely used across enterprise environments, leaving thousands of instances at risk.
-
Deep Dive
CISA’s 7 biggest challenges in 2026
From infrastructure protection to improving morale, the cybersecurity agency has a lot on its plate — and it still lacks a leader.
-
Telecom sector sees steady rise in ransomware attacks
A new threat intelligence report described a potent mix of unpatched flaws and lax perimeter controls.
-
Moody’s forecasts growing AI threats, regulatory friction for 2026
The U.S. and the EU continue to pursue starkly different regulatory agendas, the research firm noted.
-
R. Eskalis/NIST. Retrieved from NIST.
NIST asks public for help securing AI agents
The agency is interested in case studies showing how best to protect agents from hackers.
-
How CIOs can brace for AI-fueled cyberthreats
Executives are carefully tracking the rise in AI use for cyberthreats, bolstering basic preparedness tactics and increasing cyber spend in response.
-
Jaguar Land Rover reports fiscal Q3 sales slump following cyberattack
The hack forced the automaker to halt production for weeks and caused disruptions across the supply chain.
-
Fraud attacks expected to ramp up in AI ‘perfect storm’
2026 is poised to be “the year of impersonation attacks” amid an explosion of AI-powered tools, a fraud prevention expert said.
-
FCC IoT labeling program loses lead company after China probe
It’s unclear if the FCC will seek to continue the program, which originated during the previous administration.
Updated Jan. 6, 2026 -
Risky shadow AI use remains widespread
A new report offers fresh evidence for why enterprises should prioritize AI governance policies.
-
Thousands of firewalls at risk as legacy flaw in Fortinet faces renewed threat
The company in December warned of recent attacks targeting a 2020 vulnerability.
Updated Jan. 5, 2026 -
CISA loses key employee behind early ransomware warnings
The future of a program that has helped prevent an estimated $9 billion in economic damages is now unclear.
-
Cyber risks grow as manufacturers turn to AI and cloud systems
Manufacturing has been the most-attacked sector for four years straight, according to a recent IBM report.
-
R. Eskalis/NIST. Retrieved from NIST.
NIST and MITRE partner to test AI defense technology for critical infrastructure
Experts said the new partnership should focus on making AI-based systems more reliable.
-
WatchGuard warns critical flaw in Firebox devices facing exploitation
The company said the threat activity is part of a larger campaign against edge devices and internet-exposed infrastructure.
Updated Dec. 23, 2025 -
ServiceNow to buy Armis for $7.75B
The combination yields a major player in cyber-physical security and exposure management.
-
CISA warns of continued threat activity linked to Brickstorm malware
Officials provided additional evidence showing its ability to maintain persistence and evade defenses.
-
AI security is fundamentally a cloud infrastructure problem, Palo Alto Networks says
Companies should prioritize identity security and integrate cloud monitoring into the SOC, according to the security firm.
-
Top lawmaker asks White House to address open-source software risks
The Senate Intelligence Committee’s chairman voiced concern about foreign adversaries tampering with code.
-
China-linked hackers exploit insecure setting in Cisco security products
The company urged customers to immediately reconfigure affected products.
-
State-linked and criminal hackers use device code phishing against M365 users
Russia-linked groups have attacked multiple sectors in recent months.
-
Rockrose Development suffers security breach affecting 47,000 people
The New York City-based firm recently found that unauthorized individuals hacked its systems and claimed to have acquired confidential information.