The Latest
-
Boards confident on cybersecurity, AI oversight, but tech changes outpace readiness
Nearly half of corporate directors think board members need cybersecurity expertise, a new survey found.
-
Sponsored by HPE
Hybrid mesh firewalls: Distributed security enforcement for a self-driving network
Can traditional firewalls keep up with today's distributed enterprise? Discover how hybrid mesh firewalls close security gaps without slowing networks.
-
ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users
Managed service providers said an attacker used compromised credentials to gain access to tenants.
-
China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign
Researchers say the hacker is harvesting credentials and stealing sensitive information.
Updated Oct. 16, 2026 -
Open-source security rests on understanding risks, scaling fixes
Developers should coordinate security work to make the most of their interconnected ecosystem, IBM said in a new report.
-
Thousands of refrigerator devices remain exposed following French cyberattack
The investigation points to a much wider risk for industrial systems across the globe.
Updated Oct. 15, 2026 -
Internet exposure of AI tools, ICS devices continues to grow
Vulnerability disclosures and hacking campaigns haven’t made much of a dent in the amount of important infrastructure left online, a new report found.
-
Hacker targets Ivanti Connect Secure in chained exploitation
Researchers warn the attacker is taking multiple steps to clean up forensic evidence after an attack.
-
Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests
The latest operation targeted “laptop farms” across Texas that allegedly aided North Korea’s moneymaking plots.
-
Microsoft, Health-ISAC and partners take down popular phishing kit services
The three marketplaces helped hackers impersonate major businesses and governments. Microsoft now controls the markets’ domain names.
-
Dangerous flaws in refrigeration equipment were disclosed months before retail attacks
Hundreds of French supermarkets faced a sophisticated cyberattack, allowing hackers to manipulate industrial controls.
Updated Oct. 13, 2026 -
Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud
Risks are growing at a time when companies rely more than ever on vendors for cybersecurity, according to a new report.
-
Citrix via Flickr
CISA calls on Citrix NetScaler customers to patch as new flaws disclosed
A newly discovered critical vulnerability is adding to the workload of customers mitigating other recent flaws.
Updated Oct. 12, 2026 -
Ahold Delhaize experiencing cybersecurity issue
The company said it took some systems offline as part of “precautionary measures.” Websites for all five of the grocer’s U.S. banners were down Monday morning.
-
GitLab fixes critical vulnerability that exposed software environments to sabotage
The company urged customers to upgrade to the latest versions of its flagship products.
-
FBI seizes domains linked to China-nexus botnet
The infrastructure supported an international hacking campaign that targeted critical providers, including a South Carolina-based power company.
-
Deep Dive
As frontier models go rogue, colleges beef up AI cybersecurity education
Student interest in AI safety is growing rapidly, and schools are rushing to prepare for new career paths.
-
What the C-suite needs to know about AI governance
As AI adoption surges, executives are learning tough lessons about security, oversight and accountability.
-
US government lagging in transition to post-quantum encryption, GAO finds
Auditors warned that agencies risked leaving sensitive data exposed to future decryption attacks.
-
AI underscores singular importance of phishing-resistant authentication, Okta says
The company presented new data about the prevalence of different forms of social-engineering attacks, saying identity fundamentals still matter in the AI era.
-
FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
An initial access broker is working with various ransomware groups in a global campaign.
-
US cyber resilience, oversight tested in series of attacks
Attacks targeting key industrial sites and unforced errors among leading AI companies are raising alarm bells.
-
IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws
The tech giant’s announcement underscores the insufficiency of companies’ existing software supply chain security practices.
-
Citrix via Flickr
Citrix issues patch for third exploited flaw in NetScaler
The memory overflow vulnerability could lead to a denial-of-service condition under certain circumstances.
Updated Oct. 5, 2026 -
White House AI task force faces expertise, partnership challenges
The Cybersecurity and Infrastructure Security Agency is nowhere to be seen in the government’s latest AI security project.
-
Fortinet warns that critical flaw in FortiMail is facing exploitation
Security researchers said that attackers can gain access to credentials, stored mail and other connected systems.