The Latest

• 

  FCC urges telecoms to boost cybersecurity amid growing ransomware threat

  The commission said it was aware of ransomware disruptions at a growing number of small and medium-sized telecoms.

  Strategy

• 

  Sponsored by Modulate

  Voice channels are the next major attack vector that security teams can’t monitor

  Deepfake voices, live fraud, zero visibility: why voice channels are the next security blind spot.

  Cyberattacks

• 

  ShinyHunters escalates tactics in extortion campaign linked to Okta environments

  Researchers are tracking multiple clusters that are using social engineering to gain access to victims.

  Threats

• 

  Deep Dive

  Manufacturers fortify cyber defenses in response to dramatic surge in attacks

  IT/OT convergence and other trends are making the manufacturing industry’s networks more vulnerable and more frequently targeted, but sector leaders are working to improve their cyber posture.

  Strategy

• 

  Cybersecurity 2026: AI, CISA, manufacturing sector all in the hot seat

  A look at the most important trends and issues in cyber this year.

  Strategy

• 

  Cisco sees vulnerability exploitation top phishing in Q4

  The company’s recommendations included monitoring for abuses of multifactor authentication, a growing threat to the enterprise.

  Breaches

• 

  CISA, security researchers warn FortiCloud SSO flaw is under attack

  The exploitation activity comes weeks after a similar authentication bypass vulnerability was found.

  Vulnerability

• 

  Federal pivot on software security oversight could complicate vendor strategies

  Software companies cheered the elimination of a government-wide attestation mandate. What comes next could be messy.

  Strategy

• 

  AI tools break quickly, underscoring need for governance

  In a new report, the security firm Zscaler said it identified severe vulnerabilities in every enterprise tool it tested — sometimes on its first prompt.

  Strategy

• 

  Corporate workers lean on shadow AI to enhance speed

  A report shows senior corporate executives are willing to allow unsanctioned AI use, which could place company data at risk.

  Updated Jan. 28, 2026

  Strategy

• 

  Interconnectedness, extortion risk make cybersecurity a healthcare C-suite priority

  A new report from Trellix reviews the biggest breaches, describes the most effective defenses and profiles the most dangerous attackers.

  Breaches

• 

  Cybercrime group claims credit for voice phishing attacks

  Security researchers at Okta previously disclosed a social engineering campaign involving custom phishing kits.

  Updated Jan. 27, 2026

  Breaches

• 

  Federal agencies abruptly pull out of RSAC after organizer hires Easterly

  The decision fits a pattern of government withdrawal from the cybersecurity community under the Trump administration.

  Strategy

• 

  Deep Dive

  5 cybersecurity trends to watch in 2026

  Corporations across the globe are facing a dynamic risk environment, as AI adoption surges with few guardrails, business resilience takes center stage and the insurance industry raises major concerns about the U.S. cyber market.

  Strategy

• 

  NIST is rethinking its role in analyzing software vulnerabilities

  As the agency’s vulnerability database buckles under a flood of submissions, it’s planning to shift some responsibilities to other parties.

  Strategy

• 

  Acting CISA chief defends workforce cuts, declares agency ‘back on mission’

  Lawmakers in both parties expressed concerns about CISA losing roughly a thousand employees.

  Strategy

• 

  IT teams aren’t equipped to stop rogue AI agents

  Autonomous systems represent an attack surface existing cybersecurity services models aren’t designed to protect.

  Cyberattacks

• 

  LastPass warns backup request is phishing campaign in disguise

  Customers received deceptive emails over the holiday weekend claiming the company was doing maintenance.

  Updated Jan. 23, 2026

  Cyberattacks

• 

  CFOs, CISOs clash over cybersecurity spending as threats mount: Expel

  Four in 10 finance leaders said quantified risk reduction would make it easier to justify a cybersecurity spending hike.

  Strategy

• 

  UK authorities warn of pro-Russia groups targeting critical infrastructure, local government

  The alert comes just over a month after a joint advisory from CISA, the FBI and Western allies citing hacktivist activity against OT providers. 

  Strategy

• 

  CEOs and CISOs differ on AI’s security value and risks

  A new report also found that American executives are more bullish on AI's potential than their British counterparts.

  Strategy

• 

  Critical flaw in Fortinet FortiSIEM targeted in exploitation threat

  Researchers originally disclosed the vulnerability in August 2025, however, a proof of concept and an advisory were just released.

  Vulnerability

• 

  US and allies collaborate on operational technology security guidance

  A new report stresses the importance of logging, network segmentation and strong authentication, among other practices.

  Strategy

• 

  Critical flaw in AWS Console risked compromise of build environment

  The CodeBreach vulnerability could have enabled a massive supply chain attack, researchers warn.

  Updated Jan. 15, 2026

  Vulnerability

• 

  DHS prepares replacement for critical infrastructure collaboration framework

  It remains unclear if the new system will include liability protections that companies say are necessary.

  Strategy

• 

  AI surges among top business risk concerns, while cybersecurity holds firm

  A report from Allianz Commercial shows the rapid embrace of AI is posing new challenges for enterprise leaders.

  Strategy

More stories