The Latest

• 

  DDoS attack volume rises in Q3, fueled by Aisuru botnet

  A report by Cloudflare also shows a surge in attacks targeting AI companies.

  Threats

• 

  Leading surveillance camera vendor signs CISA’s product-security pledge

  Axis Communications is the first major surveillance camera maker to vow to adhere to CISA’s security guidelines.

  Strategy

• 

  Senators push to renew cyber grant program for state, local governments

  Security experts and local officials say the program is vital to protecting the country.

  Strategy

• 

  Hackers ready threat campaign aimed at Zendesk environments

  Researchers warn that hackers linked to recent social engineering attacks are targeting customer-service platforms. 

  Updated Dec. 1, 2025

  Strategy

• 

  Fortinet FortiWeb flaws found in unsupported versions of web application firewall

  Security researchers raise new concerns after the company previously failed to issue prompt security guidance.

  Vulnerability

• 

  European police dismantle cryptocurrency mixer popular with ransomware gangs

  Authorities have spent years trying to cripple the ecosystem that helps hackers hide their profits.

  Strategy

• 

  Deep Dive

  Thanksgiving holiday weekend kicks off heightened threat environment for security teams

  As workers take family time and consumers race for Black Friday discounts, hackers gain an advantage to penetrate vulnerable corporate perimeters.

  Strategy

• 

  Microsoft tightens cloud login process to prevent common attack

  Hackers have spent decades exploiting a ubiquitous type of vulnerability. Microsoft is trying to change that.

  Strategy

• 

  Gainsight CEO promises transparency as it responds to compromise of Salesforce integration

  The company has been in regular contact with customers, and says only a handful have seen data directly impacted.

  Updated Nov. 26, 2025

  Breaches

• 

  CISA urges mobile security as it warns of sophisticated spyware attacks

  The agency’s rare warning about spyware activity comes as it updated mobile security guidance to reflect evolving threats.

  Cyberattacks

• 

  Russia-aligned hackers target US company in attack linked to Ukraine war effort

  A threat group called RomCom has a history of cyberattacks against entities connected to the conflict.

  Updated Nov. 25, 2025

  Threats

• 

  Hackers steal sensitive data from major banking industry vendor

  The incident highlights how supply-chain compromises threaten even well-defended industries.

  Updated Nov. 24, 2025

  Breaches

• 

  Gainsight says additional applications put on hold after Salesforce customers breached

  The company said that Zendesk and Hubspot integrations have been deactivated as the probe continues.

  Breaches

• 

  Startup firm called Factory disrupts campaign designed to hijack development platform

  The AI-based firm intercepted a state-linked operation that was abusing resources as part of a criminal cyber-fraud network.

  Cyberattacks

• 

  Salesforce investigating campaign targeting customer environments connected to Gainsight app

  Researchers warn that ShinyHunters has been compromising OAuth tokens to gain potential access to customer data. 

  Updated Nov. 21, 2025

  Breaches

• 

  SEC drops civil fraud case against SolarWinds

  Cybersecurity and legal experts considered the case a potential precedent-setter for risk disclosure.

  Breaches

• 

  Researchers warn command injection flaw in Fortinet FortiWeb is under exploitation

  The medium severity vulnerability can be chained together with a critical flaw in the same product, which could help attackers gain additional capabilities.

  Vulnerability

• 

  FCC eliminates cybersecurity requirements for telecom companies

  Commissioners sharply disagreed over whether the rules were appropriate and necessary.

  Strategy

• 

  FCC plan to scrap telecom cyber rules draws congressional backlash

  A prominent U.S. senator wants the commission to rethink its plans.

  Strategy

• 

  Record-breaking DDoS attack against Microsoft Azure mitigated

  The attack was linked to the Aisuru botnet, which targets compromised home routers and cameras.

  Threats

• 

  US, allies sanction Russian bulletproof hosting firm

  Authorities say the company helped ransomware gangs and supported DDoS attacks.

  Breaches

• 

  Trump’s cyber strategy will emphasize adversary deterrence, industry partnerships

  Cyberattacks on the U.S. are “becoming more aggressive every passing day,” the national cyber director says.

  Strategy

• 

  CISA, eyeing China, plans hiring spree to rebuild its depleted ranks

  The agency will also change some of its workforce policies to avoid driving away talented staff.

  Updated Nov. 18, 2025

  Strategy

• 

  Jaguar Land Rover reports major earnings impact from cyberattack

  The automaker set aside hundreds of millions to help stabilize its massive international supply chain. 

  Strategy

• 

  Hackers increasingly target operational technology, with manufacturing sector bearing the brunt

  Companies should segment and monitor their networks to prevent hackers from crossing over from IT to OT, a new report said.

  Vulnerability

More stories