4 articles and related resources
CISA mandates federal agencies to patch four actively exploited vulnerabilities in Microsoft, VMware, and Apple products by August 21, 2026.
The U.S. Department of War has suspended Phase II of the CMMC program, initiating a 60-day review while existing compliance obligations remain in effect.
OpenAI pauses Astra model development after discovering advanced autonomous coding and security capabilities, prompting a reassessment of safety protocols.
The ATF confirms a 'major incident' following a ransomware attack by the Qilin group, compromising a standalone system containing sensitive investigation data.
Manchester Airports Group disclosed a cyberattack compromising personal data of 8.7 million customers, affecting parking, lounge, and Wi-Fi services.
The European Commission has finalized guidance on the Cyber Resilience Act, clarifying compliance requirements ahead of the September 11, 2026, reporting deadli
Boston Scientific detected a cyberattack on August 25, 2026, causing significant global operational disruptions and prompting an ongoing investigation.
ShinyHunters claims to have breached CyrusOne, exposing sensitive client data from companies like Microsoft and Meta.
ExtraHop introduces a 400 Gbps security sensor to enhance visibility and protection in AI-driven data centers.
The compromise of the widely-used npm package keyv in August 2026 exposed millions to potential credential theft, highlighting critical software supply chain vu
Storm-1175 exploited a critical N-able N-central vulnerability to deploy StormEncryptor ransomware, highlighting the need for robust MSP security measures.
The Department of War's suspension of CMMC Phase II halts mandatory third-party assessments but maintains existing cybersecurity obligations for defense contrac
CareCloud's March 2026 data breach exposed sensitive information of over 3.75 million patients, highlighting critical cybersecurity vulnerabilities in healthcar
Zscaler introduces the ZAgent Framework, enhancing Zero Trust SASE to secure communications across browsers, workloads, and unmanaged devices in the AI era.
Clop ransomware exploits PTC Windchill vulnerability CVE-2026-12569, impacting major corporations like Shell and Philips.
OpenAI suspends Astra AI model development over security concerns about autonomous vulnerability exploitation.
SAP Commerce Cloud's critical vulnerability CVE-2026-58231 was exploited within days of disclosure, highlighting the need for prompt patching and vigilant monit
Cl0p ransomware exploits Oracle E-Business Suite vulnerability to target major corporations, highlighting the need for robust cybersecurity measures.
The Bitwarden CLI npm package was compromised in a supply chain attack, highlighting the critical need for enhanced security measures in software dependencies.
Trezor's shipping partner, ShipMonk, suffered a data breach exposing personal information of nearly 14,000 customers, raising concerns over potential phishing r
Gunra ransomware exploits Fortinet vulnerabilities to target critical infrastructure, emphasizing the need for timely patching and robust cybersecurity practice
A critical macOS Screen Sharing vulnerability (CVE-2026-65400) is being actively exploited, allowing remote attackers to gain root access and deploy cryptocurre
The March 2026 LiteLLM supply chain attack exposed sensitive data from over 2,500 organizations, highlighting critical vulnerabilities in software dependencies.
Taiwan faces the first known autonomous AI cyberattack, compromising critical infrastructure and highlighting the need for advanced cybersecurity measures.
A significant data breach at France's Finance Ministry exposed 600,000 taxpayer records, raising concerns about public sector cybersecurity.
Recent developments reveal AI agents as both targets and perpetrators in cyberattacks, highlighting the need for enhanced security measures.
Swiss government's SharePoint servers breached in July 2026, compromising 200 accounts; attackers exploited known vulnerabilities before patches were applied.
U.S. and South Korean authorities warn of the escalating threat posed by the Gunra ransomware group, urging organizations to bolster cybersecurity defenses.
OpenAI has released GPT-5.6-Cyber, a specialized AI model designed to enhance cybersecurity defenses against autonomous attacks.
Zscaler expands its Zero Trust SASE solution to secure AI-driven enterprises, introducing the ZAgent Framework and extending capabilities to unmanaged devices a
Open-source malware has shifted focus to credential theft within UK supply chains, posing significant risks to organizations reliant on open-source software.
OpenAI introduces GPT-5.6-Cyber, a specialized AI model designed to enhance cybersecurity defenses against emerging threats.
Amazon identifies North Korean group SAPPHIRE SLEET behind recent open-source supply chain attacks, compromising popular NPM libraries.
F5, Inc. acquires CalypsoAI for $180 million to enhance AI security offerings.
Ernst & Young disclosed a data breach compromising client tax documents due to unauthorized access to a third-party IT platform.
JadePuffer's ENCFORGE ransomware targets AI infrastructures, encrypting models and disrupting operations, highlighting the need for enhanced cybersecurity measu
WordPress has patched critical vulnerabilities CVE-2026-63030 and CVE-2026-60137, urging immediate updates to prevent potential exploits.
Microsoft's July 2026 Patch Tuesday addresses a record 622 vulnerabilities, including three critical zero-days, underscoring the importance of prompt updates.
Cloudflare's Precursor introduces continuous behavioral validation to effectively detect and mitigate sophisticated bot activities without disrupting legitimate
D1R ransomware group targets tech giants Synopsys, Bosch, and ARM, exploiting critical vulnerabilities in security appliances.
Coca-Cola's Fairlife dairy operations in the U.S. were temporarily suspended following a ransomware attack, highlighting the growing cyber threats in the food a
Exterro introduces ARMOUR for FTK, an AI-driven tool revolutionizing digital forensic investigations with agentic AI capabilities.
The DoD has suspended CMMC Phase II, halting upcoming certification deadlines and initiating a comprehensive review of the program.
Sophos introduces Fusion, an AI-native platform unifying security tools to streamline operations and enhance threat detection.
Accenture confirms a data breach involving 35GB of stolen source code and credentials, raising concerns about security measures at the consulting firm.
Coforge Limited introduces SecureEdge2Cloud, an AI-powered Zero Trust security platform built on Zscaler's platform, enhancing enterprise cybersecurity.
AI-driven platforms like NISSI and MixMode are transforming cyber threat detection, offering real-time analysis and automated responses to enhance security.
GodDamn ransomware employs the PoisonX driver, signed with a legitimate Microsoft certificate, to disable endpoint detection systems, enhancing its stealth and
AssuranceAmerica disclosed a data breach affecting 6.9 million individuals, exposing personal information and driver's license numbers.
Exterro's ARMOUR for FTK leverages AI to revolutionize digital forensic investigations, offering streamlined, efficient, and comprehensive analysis capabilities