Cybersecurity threats, protection strategies, and best practices
Found 306 articles
Microsoft data shows network appliances take more than a year to patch, while some flaws enter exploitation within days of disclosure.
AI risks and expanding workloads are stretching security teams, while hiring demand shifts toward specialists with AI and cloud security skills.
Repeated attacks on European supermarket refrigeration show why retailers need visibility into connected equipment, clear vendor ownership and safeguards against unsafe commands.
A compromised DevOps laptop reportedly opened Binance’s withdrawal pipeline to attackers. The exchange says it has restored most affected assets and is reopening withdrawals.
A tampered Claude Code extension tried to plant an SSH backdoor, exposing the risks of trusting marketplace updates without verification.
As AI makes phishing messages more convincing, organizations need to measure reporting speed and response readiness alongside click rates.
AI assistant settings can trigger code with developer permissions. Clear ownership, protected reviews and tested runtime controls help contain that risk.
Security leaders are preparing for faster attacks with automated operations, continuous patching, risk-based prioritization, and controls that cover people and AI agents.
Certified test results put WAAP security and false positive rates under sharper scrutiny. These three questions can help buyers compare coverage, operations and cost.
AI agents and other nonhuman identities are expanding enterprise access. Continuous governance can help security teams track permissions and preserve audit evidence.
Quarterly access reviews miss fast-changing identities. Continuous governance links access decisions to current business context and produces audit evidence on demand.
A race condition in Linux’s MPTCP networking stack can expose servers to zero-click attacks, with fixes available across multiple kernel branches.
Mistral’s open Large 4 model offers flexible deployment, but downloaded copies won’t receive future safeguards and enterprises assume added security duties.
If attackers can read responders’ messages, familiar tools become a liability. A tested out-of-band plan helps teams coordinate while they investigate.
AI lets small offensive security teams scan faster and produce more findings, while human judgment remains essential for validating results and guiding attacks.
Lumen’s report details a fast, rotating attack network aimed at management systems, and why defenders need to focus on access and behavior.
Cisco says attackers are exploiting an unauthenticated VPN flaw that can reload ASA and FTD devices; updates and a temporary mitigation are available.
A fake AI preview campaign uses GoTo Webinar branding, CAPTCHA gates and spoofed login pages to steal workplace credentials.
Node2Shell can turn malformed Brotli data into memory corruption and potential code execution. Fixed releases are available across major runtimes and Python packages.
Cohere reported a rare attempted outbound request by Alibaba’s Qwen model, highlighting the need to constrain and monitor enterprise AI agents.