Q-day is coming: How to prepare for post-quantum security challenges

Q-day is coming. Discover how to prepare your IT infrastructure for post-quantum security challenges.

By Sue Poremba • Oct. 19, 2026

Open-source security rests on understanding risks, scaling fixes

Developers should coordinate security work to make the most of their interconnected ecosystem, IBM said in a new report.

By Eric Geller • Oct. 16, 2026

Explore the Trendline➔

Managing and securing identity sprawl

Cyber threat actors know the simplest way to hack into an enterprise and remain under the radar is with stolen, legitimate user credentials -- and AI is making managing and securing digital identities more challenging than ever.

By Cybersecurity Dive staff

Thousands of refrigerator devices remain exposed following French cyberattack

The investigation points to a much wider risk for industrial systems across the globe.

By David Jones • Updated Oct. 15, 2026

Internet exposure of AI tools, ICS devices continues to grow

Vulnerability disclosures and hacking campaigns haven’t made much of a dent in the amount of important infrastructure left online, a new report found.

By Eric Geller • Oct. 15, 2026

Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests

The latest operation targeted “laptop farms” across Texas that allegedly aided North Korea’s moneymaking plots.

By Eric Geller • Oct. 14, 2026

Microsoft, Health-ISAC and partners take down popular phishing kit services

The three marketplaces helped hackers impersonate major businesses and governments. Microsoft now controls the markets’ domain names.

By Eric Geller • Oct. 14, 2026

Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud

Risks are growing at a time when companies rely more than ever on vendors for cybersecurity, according to a new report.

By Eric Geller • Oct. 13, 2026

GitLab fixes critical vulnerability that exposed software environments to sabotage

The company urged customers to upgrade to the latest versions of its flagship products.

By Eric Geller • Oct. 12, 2026

FBI seizes domains linked to China-nexus botnet

The infrastructure supported an international hacking campaign that targeted critical providers, including a South Carolina-based power company.

By David Jones • Oct. 9, 2026

As frontier models go rogue, colleges beef up AI cybersecurity education

Student interest in AI safety is growing rapidly, and schools are rushing to prepare for new career paths.

By Eric Geller • Oct. 9, 2026

US government lagging in transition to post-quantum encryption, GAO finds

Auditors warned that agencies risked leaving sensitive data exposed to future decryption attacks.

By Eric Geller • Oct. 8, 2026

AI underscores singular importance of phishing-resistant authentication, Okta says

The company presented new data about the prevalence of different forms of social-engineering attacks, saying identity fundamentals still matter in the AI era.

By Eric Geller • Oct. 7, 2026

FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users

An initial access broker is working with various ransomware groups in a global campaign.

By David Jones • Oct. 7, 2026

IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws

The tech giant’s announcement underscores the insufficiency of companies’ existing software supply chain security practices.

By Eric Geller • Oct. 6, 2026

Citrix issues patch for third exploited flaw in NetScaler

The memory overflow vulnerability could lead to a denial-of-service condition under certain circumstances.

By David Jones • Updated Oct. 5, 2026

White House AI task force faces expertise, partnership challenges

The Cybersecurity and Infrastructure Security Agency is nowhere to be seen in the government’s latest AI security project.

By Eric Geller • Oct. 5, 2026

Defending against AI-fueled cyberattacks requires focus on identity, data governance, Microsoft says

The company’s latest report previews how AI is changing threat activity, including by automating ransomware attacks.

By Eric Geller • Oct. 2, 2026

State-linked actor targets US AI policy experts in credential phishing campaigns

The China-linked espionage attacks were designed to gain insight into the country’s strategy and regulatory environment.

By David Jones • Updated Oct. 2, 2026

Mass exploitation of Citrix NetScaler: What we currently know

Suspected state-linked actors targeted critical vulnerabilities in the widely used platform, causing widespread disruption across Europe and North America.

By David Jones • Sept. 30, 2026

Dotted Line: How construction is dealing with cybersecurity in the age of AI

Contractors rank cybersecurity low on their priority lists. But lawyers say being prepared is critical when the inevitable breach occurs.

By Joe Bousquin • Sept. 29, 2026

Kiteworks lifts advisory after precautionary warning for customers to shut down systems

The firm had received information from law enforcement of a possible attack.

By David Jones • Sept. 28, 2026

Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts

Security teams received urgent calls to disconnect servers before authorities confirmed critical zero-day flaws.

By David Jones • Sept. 28, 2026

Niche AI tools pose major cybersecurity risk to infrastructure operators

Security vetting tools and processes weren’t designed with obscure AI services in mind, according to TrendAI.

By Eric Geller • Sept. 28, 2026

Businesses expand AI’s cybersecurity uses as comfort with technology grows

Companies in the experimentation stage were less likely than established users to deploy advanced AI-powered defenses, a new survey found.

By Eric Geller • Sept. 25, 2026

Threat groups ramp up social-engineering attacks against healthcare sector

Hackers linked to high-profile cybercrime groups have used voice-phishing tactics to trick workers into giving up credentials in recent attacks.

By David Jones • Sept. 25, 2026