The Latest

• 

  Newly observed malware campaign likely combines AI and ClickFix

  Using the techniques in tandem helps hackers evade detection, a security firm said.

  Cyberattacks

• 

  Sponsored by 1Password

  How OpenClaw’s agent skills become an attack surface

  OpenClaw and similar AI agent ecosystems, present pressing security risks.

  Cyberattacks

• 

  Espionage campaign targets telecom with stealthy Linux-based backdoor

  A China-nexus actor has been able to gain long-term access in a bid to gather intel on government agencies and critical infrastructure providers.

  Threats

• 

  Identity is the first line of defense, especially in an AI-fueled threat landscape

  Two new reports illustrate why companies need to do a better job of scrutinizing what their human employees and AI agents are doing.

  Strategy

• 

  Stryker restores most manufacturing after cyberattack

  The medtech company has been working to restore manufacturing, ordering and shipping operations since it was hit by a cyberattack on March 11.

  Breaches

• 

  Critical flaw in Citrix NetScaler raises fears of new exploitation wave

  Researchers warn that security teams need to take immediate mitigation steps before a public proof of concept is released.

  Updated March 27, 2026

  Vulnerability

• 

  ‘Do not shift budgets to AI’: How businesses should and shouldn’t respond to evolving threats

  Experts said companies rushing to buy AI services risk letting their existing, still-vital defensive measures deteriorate.

  Strategy

• 

  Congress wants details from White House on cyber strategy, Iran resilience measures

  Lawmakers’ aides from both parties say they want to be kept in the loop on implementation.

  Strategy

• 

  Iran-linked ransomware operation targeted US healthcare provider

  The Pay2Key group may have shifted its aims from extortion to destruction.

  Cyberattacks

• 

  The CVE Program, a bedrock of global cyber defense, is teetering on the brink

  A funding scare, AI and similar international initiatives are raising existential questions about the program’s future.

  Strategy

• 

  Companies face difficult choices in blaming hackers for an attack

  Publicly naming a hacking group can affect everything from retaliation to insurance coverage.

  Strategy

• 

  FCC bans import of consumer-grade routers amid national security concerns

  The decision follows years of escalating attacks against the U.S. from state-linked threat groups targeting routers and edge devices.

  Updated March 24, 2026

  Strategy

• 

  Cybercrime groups speed up initial access handoff through planning, coordination

  A report by Google Threat Intelligence Group also shows voice-based phishing has surged amid a rise in social engineering tactics.

  Strategy

• 

  AI poised to help low-skilled hackers in the near term

  The expected rise in automated cyberattacks means more work for defenders — but they can use AI to fight back.

  Cyberattacks

• 

  ISACs confront AI’s promise and peril for threat intelligence-sharing

  Any use of AI for ISAC work must preserve members’ trust, representatives of three critical infrastructure sectors said.

  Strategy

• 

  Stryker confirms cyberattack is contained and restoration underway

  An assurance letter from Palo Alto Networks provides insight into the forensic investigation at the medical technology firm.

  Strategy

• 

  Lockheed Martin targeted in alleged breach by pro-Iran hacktivist

  The group is demanding millions of dollars to not sell the information to U.S. adversaries.

  Breaches

• 

  Network edge devices still widely used after reaching end-of-life status

  A report by VulnCheck shows nation-state hackers often target flaws in aging routers, firewalls and VPNs.

  Vulnerability

• 

  DOJ confirms seizure of domains linked to Iran-backed threat actor

  A group connected to Iranian intelligence used the same infrastructure to claim credit for the hack of medical technology firm Stryker. 

  Cyberattacks

• 

  Companies know AI is essential for cyber defense but aren’t yet seeing returns

  The maturity of organizations’ AI oversight also varies significantly, according to a new EY survey of cybersecurity leaders.

  Strategy

• 

  US, allies move to dismantle four high-volume IoT botnets

  The armies of hacked computers and internet of things gadgets powered disruption and extortion campaigns that sometimes cost victims tens of thousands of dollars.

  Cyberattacks

• 

  CISA urges organizations to harden endpoint security following Stryker attack

  The agency is coordinating with the FBI and other agencies amid concerns about additional threat activity involving Microsoft Intune. 

  Vulnerability

• 

  Water utilities need hands-on cybersecurity help, not just free guidance, pilot program finds

  In a new report, Microsoft criticized the federal government for scaling back support to critical infrastructure operators.

  Strategy

• 

  New research unpacks North Korea’s stealthy, sophisticated remote IT worker schemes

  The report recommends that businesses practice several forms of vigilance to avoid unwittingly hiring Pyongyang’s operatives.

  Strategy

• 

  Threat groups target cyber-physical systems to disrupt critical infrastructure providers

  The Iran war has raised concerns that key industrial sectors could be the target of hacktivists, state actors and other groups.

  Strategy

• 

  Stryker begins restoring ordering, shipping systems after cyberattack

  The medtech company believes the cyberattack has been contained and is now bringing systems back online.

  Cyberattacks

More stories