The Latest
-
Deep Dive
Manufacturers fortify cyber defenses in response to dramatic surge in attacks
IT/OT convergence and other trends are making the manufacturing industry’s networks more vulnerable and more frequently targeted, but sector leaders are working to improve their cyber posture.
-
Cybersecurity 2026: AI, CISA, manufacturing sector all in the hot seat
A look at the most important trends and issues in cyber this year.
-
Cisco sees vulnerability exploitation top phishing in Q4
The company’s recommendations included monitoring for abuses of multifactor authentication, a growing threat to the enterprise.
-
CISA, security researchers warn FortiCloud SSO flaw is under attack
The exploitation activity comes weeks after a similar authentication bypass vulnerability was found.
-
Federal pivot on software security oversight could complicate vendor strategies
Software companies cheered the elimination of a government-wide attestation mandate. What comes next could be messy.
-
AI tools break quickly, underscoring need for governance
In a new report, the security firm Zscaler said it identified severe vulnerabilities in every enterprise tool it tested — sometimes on its first prompt.
-
Corporate workers lean on shadow AI to enhance speed
A report shows senior corporate executives are willing to allow unsanctioned AI use, which could place company data at risk.
Updated Jan. 28, 2026 -
Interconnectedness, extortion risk make cybersecurity a healthcare C-suite priority
A new report from Trellix reviews the biggest breaches, describes the most effective defenses and profiles the most dangerous attackers.
-
Cybercrime group claims credit for voice phishing attacks
Security researchers at Okta previously disclosed a social engineering campaign involving custom phishing kits.
Updated Jan. 27, 2026 -
Federal agencies abruptly pull out of RSAC after organizer hires Easterly
The decision fits a pattern of government withdrawal from the cybersecurity community under the Trump administration.
-
Deep Dive
5 cybersecurity trends to watch in 2026
Corporations across the globe are facing a dynamic risk environment, as AI adoption surges with few guardrails, business resilience takes center stage and the insurance industry raises major concerns about the U.S. cyber market.
-
R. Eskalis/NIST. Retrieved from NIST.
NIST is rethinking its role in analyzing software vulnerabilities
As the agency’s vulnerability database buckles under a flood of submissions, it’s planning to shift some responsibilities to other parties.
-
Acting CISA chief defends workforce cuts, declares agency ‘back on mission’
Lawmakers in both parties expressed concerns about CISA losing roughly a thousand employees.
-
IT teams aren’t equipped to stop rogue AI agents
Autonomous systems represent an attack surface existing cybersecurity services models aren’t designed to protect.
-
LastPass warns backup request is phishing campaign in disguise
Customers received deceptive emails over the holiday weekend claiming the company was doing maintenance.
Updated Jan. 23, 2026 -
CFOs, CISOs clash over cybersecurity spending as threats mount: Expel
Four in 10 finance leaders said quantified risk reduction would make it easier to justify a cybersecurity spending hike.
-
UK authorities warn of pro-Russia groups targeting critical infrastructure, local government
The alert comes just over a month after a joint advisory from CISA, the FBI and Western allies citing hacktivist activity against OT providers.
-
CEOs and CISOs differ on AI’s security value and risks
A new report also found that American executives are more bullish on AI's potential than their British counterparts.
-
Critical flaw in Fortinet FortiSIEM targeted in exploitation threat
Researchers originally disclosed the vulnerability in August 2025, however, a proof of concept and an advisory were just released.
-
US and allies collaborate on operational technology security guidance
A new report stresses the importance of logging, network segmentation and strong authentication, among other practices.
-
Critical flaw in AWS Console risked compromise of build environment
The CodeBreach vulnerability could have enabled a massive supply chain attack, researchers warn.
Updated Jan. 15, 2026 -
DHS prepares replacement for critical infrastructure collaboration framework
It remains unclear if the new system will include liability protections that companies say are necessary.
-
AI surges among top business risk concerns, while cybersecurity holds firm
A report from Allianz Commercial shows the rapid embrace of AI is posing new challenges for enterprise leaders.
-
Retrieved from Senate Homeland Security Committee.
Trump resubmits Sean Plankey for CISA director
It’s unclear when the Senate will act on Plankey’s nomination, which stalled last year after multiple senators blocked it.
-
Healthcare breaches double as shadow AI, vendor risks proliferate
A new report paints a picture of a sector with limited confidence in its defensive capabilities.