The Latest

• 

  Startup firm called Factory disrupts campaign designed to hijack development platform

  The AI-based firm intercepted a state-linked operation that was abusing resources as part of a criminal cyber-fraud network.

  Cyberattacks

• 

  Salesforce investigating campaign targeting customer environments connected to Gainsight app

  Researchers warn that ShinyHunters has been compromising OAuth tokens to gain potential access to customer data. 

  Updated Nov. 21, 2025

  Breaches

• 

  SEC drops civil fraud case against SolarWinds

  Cybersecurity and legal experts considered the case a potential precedent-setter for risk disclosure.

  Breaches

• 

  Researchers warn command injection flaw in Fortinet FortiWeb is under exploitation

  The medium severity vulnerability can be chained together with a critical flaw in the same product, which could help attackers gain additional capabilities.

  Vulnerability

• 

  FCC eliminates cybersecurity requirements for telecom companies

  Commissioners sharply disagreed over whether the rules were appropriate and necessary.

  Strategy

• 

  FCC plan to scrap telecom cyber rules draws congressional backlash

  A prominent U.S. senator wants the commission to rethink its plans.

  Strategy

• 

  Record-breaking DDoS attack against Microsoft Azure mitigated

  The attack was linked to the Aisuru botnet, which targets compromised home routers and cameras.

  Threats

• 

  US, allies sanction Russian bulletproof hosting firm

  Authorities say the company helped ransomware gangs and supported DDoS attacks.

  Breaches

• 

  Trump’s cyber strategy will emphasize adversary deterrence, industry partnerships

  Cyberattacks on the U.S. are “becoming more aggressive every passing day,” the national cyber director says.

  Strategy

• 

  CISA, eyeing China, plans hiring spree to rebuild its depleted ranks

  The agency will also change some of its workforce policies to avoid driving away talented staff.

  Updated Nov. 18, 2025

  Strategy

• 

  Jaguar Land Rover reports major earnings impact from cyberattack

  The automaker set aside hundreds of millions to help stabilize its massive international supply chain. 

  Strategy

• 

  Hackers increasingly target operational technology, with manufacturing sector bearing the brunt

  Companies should segment and monitor their networks to prevent hackers from crossing over from IT to OT, a new report said.

  Vulnerability

• 

  Critical vulnerability in Fortinet FortiWeb is under exploitation

  The company faces criticism as multiple researchers claim a silent patch was issued weeks before official guidance was released.

  Vulnerability

• 

  US chips away at North Korean IT worker fraud

  Authorities have described Pyongyang’s revenue-generating schemes as threats to U.S. national and economic security.

  Strategy

• 

  CISO pay is on the rise, even as security budgets tighten

  Companies are increasingly lavishing benefits on their top security executives, a recent report found.

  Strategy

• 

  Anthropic warns state-linked actor abused its AI tool in sophisticated espionage campaign

  Researchers said a China-backed adversary conducted powerful attacks with almost no human intervention. 

  Updated Nov. 14, 2025

  Threats

• 

  Western governments disrupt trifecta of cybercrime tools

  Authorities seized more than 1,000 servers and 20 domains in the operation.

  Strategy

• 

  Akira engaged in ransomware attacks against critical sectors

  The group has stepped up threat activity by abusing edge devices and other tools, reaping hundreds of millions of dollars in illicit gains.

  Updated Nov. 14, 2025

  Vulnerability

• 

  Government funding bill temporarily revives cybersecurity information-sharing law

  The spending legislation passed by Congress will reauthorize the CISA 2015 program through the end of January.

  Strategy

• 

  UK authorities propose law to set minimum cyber standards for critical sectors

  The legislation follows a wave of social engineering attacks that rocked the nation’s retail and automotive supply chains.

  Cyberattacks

• 

  Sophisticated threat actor targeting zero-day flaws in Cisco ISE and Citrix

  Hackers use custom malware to access multiple vulnerabilities, researchers from Amazon warn.

  Vulnerability

• 

  Companies want more from their threat intelligence platforms

  Customers expect faster, more accurate and more relevant data, Recorded Future found in a new report.

  Strategy

• 

  Shadow AI is widespread — and executives use it the most

  Employees in fields like health care and finance trust AI more than they trust their colleagues, according to a new report.

  Strategy

• 

  Cisco detects new attack variant targeting vulnerable firewalls

  Hackers may be able to overload unpatched devices, the company said.

  Vulnerability

• 

  Conduent warns of further financial fallout from cyberattack

  The company has incurred millions in expenses related to data breach notifications stemming from an attack earlier this year. 

  Strategy

More stories