The Latest

• 

  Conduent warns of further financial fallout from cyberattack

  The company has incurred millions in expenses related to data breach notifications stemming from an attack earlier this year. 

  Strategy

• 

  AI agents worsen IT’s capacity crunch: S&P Global

  An infrastructure overhaul to support agentic systems is underway, bringing with it a new set of capacity demands and security considerations. 

  Strategy

• 

  Nevada ransomware attack traced back to malware download by employee

  The state refused to pay a ransom and recovered 90% of the impacted data.

  Cyberattacks

• 

  Cyberattacks surge against IoT, mobile devices in critical infrastructure

  Manufacturing and energy firms saw some of the biggest increases in malware activity targeting connected devices.

  Cyberattacks

• 

  SonicWall says state-linked actor behind attacks against cloud backup service

  CEO announces security and governance reforms inside the company, including the adoption of secure-by-design practices.

  Strategy

• 

  In financial sector, vendors lag behind customers on cybersecurity

  Financial firms should be performing regular oversight of their vendors to avoid supply chain compromises, according to a new report.

  Strategy

• 

  Hackers targeting Cisco IOS XE devices with BadCandy implant

  Security researchers and Australian authorities warn that exploitation activity is ongoing.

  Updated Nov. 5, 2025

  Vulnerability

• 

  AI-based malware makes attacks stealthier and more adaptive

  Google says it has discovered at least five malware families that use AI to reinvent themselves and hide from defenders.

  Cyberattacks

• 

  Researchers warn of flaws that allow manipulation of Microsoft Teams messages

  A report by Check Point shows hackers could forge identities and alter messages.

  Vulnerability

• 

  AI risks pack a punch, but governance provides a buffer

  Enterprises strengthen governance and focus on responsible practices as more than 3 in 5 suffer AI risk-related losses of more than $1 million, EY data shows. 

  Strategy

• 

  Identity-based attacks need more attention in cloud security strategies

  Companies should lock down user accounts and scan for compromised credentials, according to a new report.

  Strategy

• 

  Cybercrime groups team with organized crime in massive cargo theft campaigns

  Financially motivated hackers are abusing remote monitoring and access tools against trucking and freight companies, Proofpoint warns.

  Updated Nov. 3, 2025

  Cyberattacks

• 

  Security leaders say AI can help with governance, threat detection, SOC automation

  Executives and technical leaders differ on AI priorities, according to a report from Amazon.

  Strategy

• 

  Windows Server Update Service exploitation ensnares at least 50 victims

  Researchers say hackers could be gathering intelligence for future attacks, and authorities warn users to apply patches and check for compromise.

  Vulnerability

• 

  CISA, NSA unveil best-practices guide to address ongoing Exchange Server risks

  The guide follows CISA’s warnings in August about a high-severity vulnerability in Microsoft Exchange.

  Strategy

• 

  FCC will vote to scrap telecom cybersecurity requirements

  The commission’s Republican chair, who voted against the rules in January, calls them ineffective and illegal.

  Updated Oct. 31, 2025

  Strategy

• 

  CISA updates guidance and warns security teams on WSUS exploitation

  The agency urges users to apply emergency patches from Microsoft to counter a serious threat.

  Vulnerability

• 

  Canadian authorities warn of hacktivists targeting exposed ICS devices

  Hackers have manipulated critical components at water utilities, oil and gas facilities, and agricultural sites in recent weeks.

  Updated Oct. 31, 2025

  Cyberattacks

• 

  AI adoption outpaces corporate governance, security controls

  Security and business leaders warn that companies are accelerating their use of agentic AI beyond the ability to maintain proper guardrails. 

  Vulnerability

• 

  F5 expects nation-state hack to curb revenues

  The company says it could lose new deals because of the intrusion.

  Breaches

• 

  Google probes exploitation of critical Windows service CVE

  Researchers have traced the threat activity to a newly identified hacker, while separate evidence points to more than one variant.

  Vulnerability

• 

  Conduent says data breach originally began with 2024 intrusion

  The cyberattack, which affected several state agencies, has also impacted multiple insurance providers.

  Breaches

• 

  UN member states sign cybercrime agreement despite industry, activist opposition

  Critics say the new convention is ripe for abuse by authoritarian countries.

  Cyberattacks

• 

  Hackers exploiting critical vulnerability in Windows Server Update Service

  Microsoft has issued an out-of-band update and is urging users to immediately apply the patch.

  Updated Oct. 27, 2025

  Vulnerability

• 

  Opinion

  Gartner: How to prepare for and respond to today’s evolving threat landscape

  With the emergence of AI, security operations teams must navigate a fast-moving generation of cyber threats.

  Cyberattacks

More stories