Citrix NetScaler exploitation began days before public notification

The Latest

• 

  Businesses expand AI’s cybersecurity uses as comfort with technology grows

  Companies in the experimentation stage were less likely than established users to deploy advanced AI-powered defenses, a new survey found.

  Strategy

• 

  Sponsored by NordLayer Intelligence by NordStellar

  Your attack surface is bigger than you think… and hackers know that

  Cyberattacks are exploiting trusted access points like compromised credentials and session cookies. Discover how organizations are gaining visibility beyond their perimeter to stay ahead of threats.

  Cyberattacks

• 

  Threat groups ramp up social-engineering attacks against healthcare sector

  Hackers linked to high-profile cybercrime groups have used voice-phishing tactics to trick workers into giving up credentials in recent attacks.

  Breaches

• 

  Rogue OpenAI agent targeted Australian government site

  The prime minister rebuked the company for its slow response and warned that AI poses significant risks that need to be further addressed.

  Breaches

• 

  Wiz uses AI to find vulnerabilities in critical infrastructure

  The Google subsidiary, which helped a railroad and two hospitals, invited others to apply for its free scanning service.

  Vulnerability

• 

  FBI probes cyberattack tied to third-party jobs portal

  The potentially serious breach highlights the supply chain risks facing even the most sophisticated organizations.

  Updated Sept. 23, 2026

  Cyberattacks

• 

  Industrial leaders face cyber resilience gap as attacks shake confidence

  More than one-third of industrial firms consider cyber risk as the top obstacle to growth.

  Strategy

• 

  Businesses fear cyberattacks more than anything else, driven by AI and supply chain worries

  Many companies still aren’t preparing thoroughly enough to face a hack, the insurance firm Travelers said in a new report.

  Strategy

• 

  Retailers tamp down shadow AI but struggle to oversee agentic sprawl

  The use of AI agents is soaring in the retail sector, but visibility remains a major challenge, with regulated data at risk.

  Strategy

• 

  Insurance sector begins to offer clarity on AI-related cyber claims

  The emergence of agentic AI and frontier models has led to widespread uncertainty for policyholders.

  Strategy

• 

  Google AI models broke out of sandbox, hacked three companies

  The incidents stemmed from the same testing environment defects that tripped up OpenAI, Anthropic and Meta.

  Updated Sept. 21, 2026

  Breaches

• 

  China-nexus actor steals thousands of documents in monthslong exploitation campaign

  Researchers suspect the hacker employed LLMs to develop custom tools.

  Vulnerability

• 

  CISA ends weekly vulnerability roundups as part of shift to prioritization approach

  The agency wants to help companies sort through the AI-fueled avalanche of bug reports.

  Strategy

• 

  Settra ransomware variant deployed in recent attacks

  Security researchers warned that hackers are using VPN credentials for initial access and deploying RMM tools.

  Cyberattacks

• 

  FBI, Coast Guard probe suspected cyberattacks on ships entering US waters

  The investigation comes at a time of heightened vigilance over U.S. port facilities and maritime security.

  Cyberattacks

• 

  Manufacturers make patching progress, but identity management still major weakness

  Misconfigurations remain widespread in the manufacturing sector, including internet-accessible remote-access software, a new report found.

  Vulnerability

• 

  CISA looks to recruit general infrastructure security experts rather than sector-focused advisers

  “I need people that can pivot from day to day,” the agency’s acting chief told reporters.

  Strategy

• 

  Hackers exploit zero-day flaw in Cisco email gateway

  Researchers warn the vulnerability could be used by state-linked actors for espionage.

  Vulnerability

• 

  Companies’ AI strategies don’t account for agentic tools

  Businesses are taking AI governance seriously, but their plans lag behind the technology they’re using, according to an EY survey.

  Strategy

• 

  AI is now leading driver of new cybersecurity spending

  The prioritization comes at a time of relatively modest growth in overall security investments, according to IANS and Artico Search.

  Updated Sept. 16, 2026

  Strategy

• 

  Malicious actors already using critical GitLab flaw, CISA and others warn

  The vulnerability could let unauthenticated users access sensitive files from software-development environments.

  Vulnerability

• 

  Security teams increasingly outflanked by AI agents

  A report warns that non-human identities are growing beyond the ability of existing systems to track. 

  Strategy

• 

  Deep Dive

  Accountability, oversight and AI: Inside Microsoft’s security transformation

  Stung by years of embarrassing hacks, the tech giant overhauled how it approached cybersecurity. Company leaders now say they’re seeing results.

  Strategy

• 

  State authorities warn they lack resources to address cyber threat to critical sectors

  State CIOs and CISOs need additional funding, personnel and training to protect water, energy and healthcare, according to a new report.

  Strategy

• 

  CISA is on the verge of filling hundreds of critical vacancies

  The agency is also working to finalize an incident-reporting regulation and set up a new industry coordination structure, its acting director said.

  Strategy

• 

  White House sees water cybersecurity partnership in Texas as national blueprint

  The government is taking a new approach to protecting critical infrastructure, National Cyber Director Sean Cairncross said.

  Strategy

More stories