The Latest

• 

  UK cyber leader calls for shift in focus toward continuity of critical services

  Richard Horne, CEO of the National Cyber Security Centre, said the U.S. remains a key ally in the global fight against sophisticated adversaries.

  Strategy

• 

  National cyber director says US must shift risk burden toward adversaries

  In his first major address after confirmation, Sean Cairncross said the U.S. needs to take bold, coordinated steps to counter authoritarian rivals.

  Strategy

• 

  Senior NSC official said US needs to embrace offensive cyber

  Alexei Bulazel said the administration is unapologetically in favor of using offensive capabilities to deter the nation’s adversaries. 

  Strategy

• 

  Deep Dive

  How AI and politics hampered the secure open-source software movement

  Tech giants pledged millions to secure open-source code. Then AI came along.

  Strategy

• 

  Mitsubishi Electric agrees to buy Nozomi Networks in deal valued at about $1B

  The agreement is part of a larger strategy for Mitsubishi to develop one-stop security capabilities in the OT space.

  Strategy

• 

  Bridgestone Americas continues probe as it looks to restore operations

  The tiremaker disclosed a cyberattack just days after Jaguar Land Rover was impacted by a major hack that also disrupted production at certain locations. 

  Cyberattacks

• 

  Salesloft platform integration restored after probe reveals monthslong GitHub account compromise

  An investigation by Mandiant found the attack began months ago, leading to a major supply chain attack.

  Breaches

• 

  Data security gaps stymy enterprise AI plans

  Nearly three-quarters of CIOs and CISOs see information complexity as an adoption roadblock.

  Strategy

• 

  Swiss Re warns of rate deterioration in cyber insurance

  Competition among insurers has forced them to offer concessions on premiums, limits and controls.

  Strategy

• 

  Marriott checks out AI agents amid technology transformation

  The multinational hospitality giant is building a model-agnostic chassis featuring an agentic layer.

  Strategy

• 

  Researchers warn of zero-day vulnerability in SiteCore products

  Mandiant said it was able to disarm a ViewState deserialization attack leveraging exposed ASP.NET keys.

  Updated Sept. 4, 2025

  Vulnerability

• 

  Deep Dive

  How the newest ISAC aims to help food and agriculture firms thwart cyberattacks

  Food industry executives used to shrug off ransomware and cyber-espionage risks. A threat intel group is helping to change that, but its reach remains unclear.

  Strategy

• 

  Cloudflare, Proofpoint say hackers gained access to Salesforce instances in attack spree

  The breaches are part of hundreds of potential supply chain attacks linked to Salesloft Drift.

  Breaches

• 

  Palo Alto Networks, Zscaler customers impacted by supply chain attacks

  A hacking campaign using credentials linked to Salesloft Drift has impacted a growing number of companies, including downstream customers of leading cybersecurity firms.

  Breaches

• 

  Deep Dive

  FCC investigation could derail its own IoT security certification program

  Internet of Things device makers are eager to participate, but the commission’s concerns about its lead administrator have halted progress of the U.S. Cyber Trust Mark program.

  Strategy

• 

  US, allies warn China-linked actors still targeting critical infrastructure

  An advisory from 13 countries says state-backed hackers continue trying to breach telecommunications systems and other vital networks.

  Breaches

• 

  Federal, state officials investigating ransomware attack targeting Nevada

  The Sunday attack disrupted key services across the state and led to the theft of some data.

  Updated Aug. 29, 2025

  Cyberattacks

• 

  NetScaler warns hackers are exploiting zero-day vulnerability

  The company is urging customers to patch their devices immediately, saying the flaw could lead to denial of service or remote code execution.

  Vulnerability

• 

  Safety-critical industries wary about using AI for cybersecurity

  Finance, tech and professional services are among the sectors with the widest adoption of AI-based security tools, according to a new report.

  Strategy

• 

  Hackers steal data from Salesforce instances in widespread campaign

  Google researchers say the hackers abused a third-party tool in an attack spree designed to harvest credentials.

  Updated Aug. 29, 2025

  Breaches

• 

  Execs worry about unknown identity-security weaknesses

  Credential theft attacks prove that companies need to do better, but business leaders cited many reasons for slow progress.

  Strategy

• 

  CISOs grow more concerned about risk of material cyberattack

  A report by Proofpoint shows growing anxiety among security leaders about their companies’ cyber readiness.

  Strategy

• 

  Credential harvesting campaign targets ScreenConnect cloud administrators

  Researchers warn that attackers are using compromised Amazon email accounts in spear-phishing attacks that may lead to ransomware infections.

  Cyberattacks

• 

  CISA updates SBOM recommendations

  The document is primarily meant for federal agencies, but CISA hopes businesses will also use it to push vendors for software bills of materials.

  Strategy

• 

  China-nexus hacker Silk Typhoon targeting cloud environments

  The state-linked espionage group has exploited zero-day flaws in Commvault and Citrix Netscaler, researchers say.

  Vulnerability

More stories