178 articles and related resources
CISA mandates federal agencies to patch four actively exploited vulnerabilities in Microsoft, VMware, and Apple products by August 21, 2026.
The U.S. Department of War has suspended Phase II of the CMMC program, initiating a 60-day review while existing compliance obligations remain in effect.
OpenAI pauses Astra model development after discovering advanced autonomous coding and security capabilities, prompting a reassessment of safety protocols.
The ATF confirms a 'major incident' following a ransomware attack by the Qilin group, compromising a standalone system containing sensitive investigation data.
Manchester Airports Group disclosed a cyberattack compromising personal data of 8.7 million customers, affecting parking, lounge, and Wi-Fi services.
The European Commission has finalized guidance on the Cyber Resilience Act, clarifying compliance requirements ahead of the September 11, 2026, reporting deadli
Boston Scientific detected a cyberattack on August 25, 2026, causing significant global operational disruptions and prompting an ongoing investigation.
ShinyHunters claims to have breached CyrusOne, exposing sensitive client data from companies like Microsoft and Meta.
Storm-1175 exploited a critical N-able N-central vulnerability to deploy StormEncryptor ransomware, highlighting the need for robust MSP security measures.
The Department of War's suspension of CMMC Phase II halts mandatory third-party assessments but maintains existing cybersecurity obligations for defense contrac
CareCloud's March 2026 data breach exposed sensitive information of over 3.75 million patients, highlighting critical cybersecurity vulnerabilities in healthcar
Zscaler introduces the ZAgent Framework, enhancing Zero Trust SASE to secure communications across browsers, workloads, and unmanaged devices in the AI era.
Clop ransomware exploits PTC Windchill vulnerability CVE-2026-12569, impacting major corporations like Shell and Philips.
OpenAI suspends Astra AI model development over security concerns about autonomous vulnerability exploitation.
SAP Commerce Cloud's critical vulnerability CVE-2026-58231 was exploited within days of disclosure, highlighting the need for prompt patching and vigilant monit
Cl0p ransomware exploits Oracle E-Business Suite vulnerability to target major corporations, highlighting the need for robust cybersecurity measures.
Trezor's shipping partner, ShipMonk, suffered a data breach exposing personal information of nearly 14,000 customers, raising concerns over potential phishing r
Gunra ransomware exploits Fortinet vulnerabilities to target critical infrastructure, emphasizing the need for timely patching and robust cybersecurity practice
A critical macOS Screen Sharing vulnerability (CVE-2026-65400) is being actively exploited, allowing remote attackers to gain root access and deploy cryptocurre
The March 2026 LiteLLM supply chain attack exposed sensitive data from over 2,500 organizations, highlighting critical vulnerabilities in software dependencies.
Taiwan faces the first known autonomous AI cyberattack, compromising critical infrastructure and highlighting the need for advanced cybersecurity measures.
A significant data breach at France's Finance Ministry exposed 600,000 taxpayer records, raising concerns about public sector cybersecurity.
Recent developments reveal AI agents as both targets and perpetrators in cyberattacks, highlighting the need for enhanced security measures.
Swiss government's SharePoint servers breached in July 2026, compromising 200 accounts; attackers exploited known vulnerabilities before patches were applied.
U.S. and South Korean authorities warn of the escalating threat posed by the Gunra ransomware group, urging organizations to bolster cybersecurity defenses.
OpenAI has released GPT-5.6-Cyber, a specialized AI model designed to enhance cybersecurity defenses against autonomous attacks.
OpenAI introduces GPT-5.6-Cyber, a specialized AI model designed to enhance cybersecurity defenses against emerging threats.
F5, Inc. acquires CalypsoAI for $180 million to enhance AI security offerings.
Ernst & Young disclosed a data breach compromising client tax documents due to unauthorized access to a third-party IT platform.
JadePuffer's ENCFORGE ransomware targets AI infrastructures, encrypting models and disrupting operations, highlighting the need for enhanced cybersecurity measu
Microsoft's July 2026 Patch Tuesday addresses a record 622 vulnerabilities, including three critical zero-days, underscoring the importance of prompt updates.
Cloudflare's Precursor introduces continuous behavioral validation to effectively detect and mitigate sophisticated bot activities without disrupting legitimate
D1R ransomware group targets tech giants Synopsys, Bosch, and ARM, exploiting critical vulnerabilities in security appliances.
Coca-Cola's Fairlife dairy operations in the U.S. were temporarily suspended following a ransomware attack, highlighting the growing cyber threats in the food a
Exterro introduces ARMOUR for FTK, an AI-driven tool revolutionizing digital forensic investigations with agentic AI capabilities.
The DoD has suspended CMMC Phase II, halting upcoming certification deadlines and initiating a comprehensive review of the program.
Sophos introduces Fusion, an AI-native platform unifying security tools to streamline operations and enhance threat detection.
Accenture confirms a data breach involving 35GB of stolen source code and credentials, raising concerns about security measures at the consulting firm.
AI-driven platforms like NISSI and MixMode are transforming cyber threat detection, offering real-time analysis and automated responses to enhance security.
GodDamn ransomware employs the PoisonX driver, signed with a legitimate Microsoft certificate, to disable endpoint detection systems, enhancing its stealth and
AssuranceAmerica disclosed a data breach affecting 6.9 million individuals, exposing personal information and driver's license numbers.
Exterro's ARMOUR for FTK leverages AI to revolutionize digital forensic investigations, offering streamlined, efficient, and comprehensive analysis capabilities
Citrix NetScaler's CVE-2026-8451 vulnerability is actively exploited, posing significant risks to organizations. Immediate patching and mitigation are crucial.
NIST's SP 800-18r2 integrates security, privacy, and supply chain risk management into system planning, enhancing compliance and resilience.
CISA is set to finalize CIRCIA's cyber incident reporting rules by September 2026, mandating critical infrastructure sectors to report significant cyber inciden
GhostLock (CVE-2026-43499) is a critical Linux kernel vulnerability allowing rapid privilege escalation, affecting versions from 2.6.39 to 7.1.
The UK's NCSC announces the 'Cyber Shield,' an AI-driven system designed to detect and respond to cyber threats at machine speed, enhancing national cybersecuri
Ubiquiti addresses seven critical vulnerabilities in UniFi OS, urging immediate updates to prevent potential exploits.
Blackpoint Cyber introduces AI SOC Agent for rapid identity threat detection and response, marking a significant advancement in cybersecurity.
Reach Security introduces Network Security Assurance, an AI-driven solution for continuous monitoring and remediation of network security misconfigurations.