The Latest

• 

  Cyberattack hits Hasbro, impacting orders and shipping

  The major U.S. toymaker and entertainment company is still working to assess if company data was stolen in the attack.

  Updated April 1, 2026

  Breaches

• 

  Sponsored by Cisco Duo

  6 trends redefining organizations’ future with IAM

  With the right preparation, you can stay ahead of the most common IAM risks. Let’s explore the emerging IAM trends and what you can do to address them proactively. 

  Threats

• 

  Iran-linked actors target Middle Eastern city governments to undermine missile-strike responses

  The password-spraying campaign is the latest evidence that Iran is hitting back in cyberspace.

  Breaches

• 

  Deep Dive

  ‘Missed opportunity’: US government’s absence from RSAC Conference leaves stark void

  The Trump administration’s decision to not attend the world’s biggest cybersecurity conference sent the wrong message to partners, experts said.

  Strategy

• 

  Cybersecurity risks shape AI adoption, but investment accelerates nonetheless

  Companies see cybersecurity as a top investment priority within their AI budgets, according to KPMG.

  Strategy

• 

  Iran actors’ claims raise questions about larger cyber threat to US, allies

  Questions are being raised about the veracity and tactics of Iran-linked actors, amid claims that a large trove of Lockheed Martin data is on the market.

  Updated March 31, 2026

  Strategy

• 

  Newly observed malware campaign likely combines AI and ClickFix

  Using the techniques in tandem helps hackers evade detection, a security firm said.

  Cyberattacks

• 

  Citrix NetScaler products confirmed to be under exploitation

  Security researchers at watchTowr warn that multiple flaws are involved in the early stages of a hacking spree that could rival the 2023 CitrixBleed campaign.

  Updated March 30, 2026

  Vulnerability

• 

  Espionage campaign targets telecom with stealthy Linux-based backdoor

  A China-nexus actor has been able to gain long-term access in a bid to gather intel on government agencies and critical infrastructure providers.

  Threats

• 

  Identity is the first line of defense, especially in an AI-fueled threat landscape

  Two new reports illustrate why companies need to do a better job of scrutinizing what their human employees and AI agents are doing.

  Strategy

• 

  Stryker restores most manufacturing after cyberattack

  The medtech company has been working to restore manufacturing, ordering and shipping operations since it was hit by a cyberattack on March 11.

  Breaches

• 

  Critical flaw in Citrix NetScaler raises fears of new exploitation wave

  Researchers warn that security teams need to take immediate mitigation steps before a public proof of concept is released.

  Updated March 27, 2026

  Vulnerability

• 

  ‘Do not shift budgets to AI’: How businesses should and shouldn’t respond to evolving threats

  Experts said companies rushing to buy AI services risk letting their existing, still-vital defensive measures deteriorate.

  Strategy

• 

  Congress wants details from White House on cyber strategy, Iran resilience measures

  Lawmakers’ aides from both parties say they want to be kept in the loop on implementation.

  Strategy

• 

  Iran-linked ransomware operation targeted US healthcare provider

  The Pay2Key group may have shifted its aims from extortion to destruction.

  Cyberattacks

• 

  The CVE Program, a bedrock of global cyber defense, is teetering on the brink

  A funding scare, AI and similar international initiatives are raising existential questions about the program’s future.

  Strategy

• 

  Companies face difficult choices in blaming hackers for an attack

  Publicly naming a hacking group can affect everything from retaliation to insurance coverage.

  Strategy

• 

  FCC bans import of consumer-grade routers amid national security concerns

  The decision follows years of escalating attacks against the U.S. from state-linked threat groups targeting routers and edge devices.

  Updated March 24, 2026

  Strategy

• 

  Cybercrime groups speed up initial access handoff through planning, coordination

  A report by Google Threat Intelligence Group also shows voice-based phishing has surged amid a rise in social engineering tactics.

  Strategy

• 

  AI poised to help low-skilled hackers in the near term

  The expected rise in automated cyberattacks means more work for defenders — but they can use AI to fight back.

  Cyberattacks

• 

  ISACs confront AI’s promise and peril for threat intelligence-sharing

  Any use of AI for ISAC work must preserve members’ trust, representatives of three critical infrastructure sectors said.

  Strategy

• 

  Stryker confirms cyberattack is contained and restoration underway

  An assurance letter from Palo Alto Networks provides insight into the forensic investigation at the medical technology firm.

  Strategy

• 

  Lockheed Martin targeted in alleged breach by pro-Iran hacktivist

  The group is demanding millions of dollars to not sell the information to U.S. adversaries.

  Breaches

• 

  Network edge devices still widely used after reaching end-of-life status

  A report by VulnCheck shows nation-state hackers often target flaws in aging routers, firewalls and VPNs.

  Vulnerability

• 

  DOJ confirms seizure of domains linked to Iran-backed threat actor

  A group connected to Iranian intelligence used the same infrastructure to claim credit for the hack of medical technology firm Stryker. 

  Cyberattacks

• 

  Companies know AI is essential for cyber defense but aren’t yet seeing returns

  The maturity of organizations’ AI oversight also varies significantly, according to a new EY survey of cybersecurity leaders.

  Strategy

More stories