Vulnerabilities & patches · News & analysis
Node2Shell Makes the Running Runtime the Critical Patch Check
Node.js fixes and an independent exploitation test put the focus on deployed containers and the paths that decode untrusted compressed data.
NEWS · ALERTS · RESEARCH
Latest cybersecurity news
Read our original reporting and analysis in full, then explore the latest headlines from publications, agencies and security researchers.
Newest headline: 2026-10-28 · 40 of 44 sources available. Source status → · Browse vulnerability records →
Original reporting & analysis
Cloud security · News & analysis
Gheist Turns GitHub Workflow Logs Into a Route Out for Cloud Secrets
Wiz’s new investigation shows why private repository access and cloud trust policies belong in the same incident review.
Identity & access · News & analysis
Microsoft 365 Token-Replay Cases Show Why Password Resets Leave Cleanup Unfinished
Huntress’s investigation connects stolen sessions with rogue devices, altered MFA methods and hidden mailbox rules.
AI security · News & analysis
A Downloaded Instructions File Tests the Boundary Around Coding Agents
Forever Security reports a malicious local instruction file and lab reproductions, highlighting the risk of granting downloaded text authority over agent settings.
Threat intelligence · News & analysis
ESET Traces a Grain Logistics Intrusion From Espionage to Destruction
New research into a 2025 Ukrainian intrusion shows why incident responders must test whether an initial foothold served more than one operator.
Ransomware · News & analysis
SafePay Advisory Puts Backup Administration Inside the Ransomware Threat Model
An international advisory describes attacks on recovery infrastructure, giving businesses a concrete test for who can alter their backups.
Data breaches · News & analysis
Quest Restores Quanum as Patient-Data Investigation Continues
The laboratory company reports restored access while the affected-patient and information scope remains unresolved.
Cybercrime & fraud · News & analysis
Unit 42 Separates AI-Assisted Intrusions From a Criminal Operator’s Plans
A new investigation reports university data theft alongside uncompleted fraud preparations, an important distinction for defenders evaluating AI-enabled crime.
Critical infrastructure · News & analysis
SENTRON Fuse Advisory Adds Network Recovery to the Maintenance Checklist
CISA’s republication of a Siemens advisory highlights a denial-of-service condition whose recovery can require rebuilding the affected network.
Industry & business · News & analysis
Mave’s $34 Million Launch Puts Investigation Evidence at the Center of the AI SOC Pitch
The startup promises to connect work across existing security tools. Buyers should test whether its conclusions remain inspectable when evidence is incomplete.
MSP / MSSP · News & analysis
Witness Gives MSPs a Way to Check the Build Behind a Software Delivery
The open-source attestation project offers a concrete starting point for providers that build or package client software, with policy ownership as the key operational decision.
Policy & compliance · News & analysis
UK Subsea Security Proposal Would Put New Duties on Cable Operators
An October 22 consultation goes beyond tougher sabotage penalties, proposing security, recovery and notification responsibilities for subsea telecoms infrastructure.
Security technology · News & analysis
OpenSSL 4.1 Adds DTLS 1.3, With Known Issues That Belong in Deployment Tests
The October 23 feature release expands protocol support, while its release notes and branch lifecycle make upgrade planning an application-specific decision.
Vulnerabilities & patches · News & analysis
Firefox Certificate Update Tests How Managed Browsers Receive Emergency Protections
Mozilla’s October 20 release brings a certificate blocklist into the browser package for systems that cannot receive the normal remote update.
Cloud security · News & analysis
AWS’s Hybrid Access Guidance Makes Certificate Rotation a Service-Continuity Issue
New PKI guidance asks cloud teams to connect short-lived credentials with clear workload identities, protected keys and tested renewal procedures.
Identity & access · News & analysis
Netwrix Fixes Dashboard-Link Exposure in Identity Manager
The vendor describes a limited authorization flaw affecting certain configurations and says its SaaS environment was patched before disclosure.
AI security · News & analysis
Anthropic Adds Hardware and Data-Center Controls to Its AI Security Roadmap
The October 19 update expands future hardening goals, giving enterprise buyers a reason to separate security commitments from deployed controls.
Industry & business · News & analysis
Proofpoint’s Varonis Deal Puts Data Access at the Center of Its Next Chapter
The proposed $6.3 billion acquisition links two security portfolios, while customers face a longer timetable for concrete integration decisions.
MSP / MSSP · News & analysis
MSP GLOBAL’s Proactive Security Agenda Raises a Practical Question: Who Acts?
This week’s managed-services gathering puts exposure reduction and AI on the agenda. Buyers need those themes translated into accountable work.
Policy & compliance · News & analysis
EU Council Backs National Entry Points in Cyber Incident Reporting Proposal
The October 21 negotiating mandate would reshape reporting routes, but businesses should keep current procedures in force while legislation is negotiated.
Security technology · News & analysis
NIST’s Privacy Cryptography Workshop Puts Deployment Questions on the Agenda
An October 26–28 virtual workshop will examine privacy-enhancing cryptography, giving technology teams a chance to frame concrete evaluation questions.
Threat intelligence · News & analysis
AOMEI Update Fix Leaves Businesses With a Historical Exposure Check
Brief changes to update infrastructure show why a clean download today cannot settle whether a workstation was exposed months ago.
Ransomware · News & analysis
Ransomware Investigations Trace a Route From VPN Access to Virtual Servers
Unit 42’s October update makes virtualization management a necessary part of investigating affected GlobalProtect gateways.
Data breaches · News & analysis
Gyazo’s Final Breach Report Puts Screenshot Metadata on the Retention Agenda
Helpfeel separates account records, image metadata and confirmed image access, giving businesses a clearer basis for reviewing shared screenshots.
Cybercrime & fraud · News & analysis
Veterans’ Benefits Fraud Plea Shows How Stolen Records Become Account Access
An October 20 guilty plea traces a chain from improperly copied personal information to financial and benefits-account theft.
Critical infrastructure · News & analysis
MicroSCADA Advisory Makes Access Controls Part of the Upgrade Plan
CISA’s October 20 republication distinguishes flaws addressed by version 10.8 from an authentication issue that also requires mitigation.
Threat intelligence · News & analysis
Silent Lynx Research Puts Archive Utilities Back on the Security Checklist
Joint research traces an espionage operation that combined familiar document lures with an archive-software exploit.
Ransomware · News & analysis
Anne Arundel Separates Two Data-Theft Investigations as Criminal Claims Surface
The county’s October update distinguishes an earlier notification process from a separate 2026 intrusion.
Data breaches · News & analysis
Pediatric Data-Breach Settlement Puts Security Vendor Responsibilities in Focus
New York and Connecticut announced a settlement involving Boston Children’s Health Physicians and its IT services provider.
Cybercrime & fraud · News & analysis
Phishing Infrastructure Market Turns Cloud Accounts Into Criminal Inventory
Microsoft’s latest investigation describes how illicit marketplaces connect account access, hosting and phishing tools.
Critical infrastructure · News & analysis
ArmorBlock Security Fixes Put Industrial Web Access on the Maintenance Agenda
Rockwell Automation’s advisory covers password changes without authentication and a separate availability flaw.
Vulnerabilities & patches · News & analysis
FreeRTOS DNS Fix Requires a Configuration Change After the Upgrade
An AWS advisory makes firmware settings part of the remediation: installing the fixed network library alone does not close the DNS issue.
Cloud security · News & analysis
SageMaker SDK Fix Leaves Teams With a Second Job: Checking Old Logs
AWS says failed Git operations can expose repository credentials in CloudWatch Logs, making credential review part of the response.
Identity & access · News & analysis
Auth0.js Fix Restores a Check on How Recently a User Signed In
The October advisory concerns applications that request a fresh authentication event, with implications for sensitive account actions.
AI security · News & analysis
Anthropic’s Self-Assessment Research Draws a Line Between Detecting Misuse and Blocking It
New results describe an efficient review signal, while acknowledging that the same mechanism is not a dependable standalone defense.
Industry & business · News & analysis
IonQ’s Elisity Deal Brings Network Access Policy Into Its Quantum Security Strategy
The proposed stock transaction connects two security priorities, while customers still need to distinguish current controls from a future combined roadmap.
MSP / MSSP · News & analysis
ConnectWise Cloud Backup Incident Leaves MSPs Facing Tenant Reviews and a Recovery Gap
Services remained suspended early Monday as Huntress reported wider authentication activity and warned that credentials added to other applications need separate investigation.
Policy & compliance · News & analysis
Britain’s AI Near-Miss Plans Put Incident Records on the Business Agenda
The government is exploring reporting and response measures for autonomous AI risks; businesses can prepare evidence without assuming new rules are already in force.
Security technology · News & analysis
VMware HyperArmor Puts the Hypervisor’s Trusted Baseline Under Scrutiny
Broadcom’s new host protections make deployment review, script approvals and emergency access important parts of a security evaluation.
Threat intelligence · News & analysis
North Korean IT Worker Crackdown Puts Remote Hiring Controls to the Test
New FBI guidance calls for checks across the employment lifecycle as facilitators take on a wider role in fraudulent hiring.
Ransomware · News & analysis
Ransomware Response Plans Face a Human Test as Staff Threats Escalate
Semperis’s new victim survey highlights intimidation, putting employee support and escalation procedures alongside technical recovery.
Data breaches · News & analysis
WestJet Privacy Investigation Closes After Security Commitments Are Met
Canada’s privacy regulator says the airline completed corrective commitments following its 2025 breach, including external assessment of new safeguards.
Cybercrime & fraud · News & analysis
West Africa Scam Crackdown Produces 28 Arrests and Millions of Account Removals
A coordinated enforcement effort shows why account removals, seized evidence and recoverable funds must be measured separately.
Critical infrastructure · News & analysis
Who Can Switch Off a Critical Service? UK Response Puts Supplier Dependence in Focus
A parliamentary answer addresses overseas technology dependence, giving operators a concrete continuity question to test with suppliers.
Vulnerabilities & patches · News & analysis
Exploited Windows Shell Flaw Gives October Patching a Clear First Priority
Microsoft confirms exploitation of CVE-2026-96951; businesses should establish which affected systems actually received the applicable fixes.
Cloud security · News & analysis
AWS GuardDuty Guidance Puts Cloud Alert Coverage Under the Microscope
An October operational guide explains how resource context strengthens attack-sequence findings—and why teams must check the services supplying that context.
Identity & access · News & analysis
Okta Sets Zendesk Provisioning Migration Dates as OAuth Replaces Basic Authentication
The change affects account provisioning rather than single sign-on, making lifecycle testing the important acceptance check.
AI security · News & analysis
Anthropic’s Agent Review Shows Why Test Environments Need Enforced Boundaries
A new account of unintended interactions with real websites gives businesses a concrete reason to test what their agents can do when a task fails.
Industry & business · News & analysis
CyberCatch Deal Clears Securityholder Vote as Customers Await Closing
The October 14 approval advances Datavault AI’s proposed acquisition, with final approvals still outstanding.
MSP / MSSP · News & analysis
Google Workspace Recovery Planning Starts Before an Employee Leaves
Fresh backup guidance puts a concrete MSP responsibility in focus: deciding what survives account deletion and proving it can be recovered.
Policy & compliance · News & analysis
NIST’s Career Week Gives Employers a Reason to Rethink Cybersecurity Hiring
The October 19–24 campaign connects career exploration with a practical management question: what work does a new hire actually need to do?
Security technology · News & analysis
Patch Dashboards Need to Show Which Devices Are Still Exposed
N-able’s October guidance highlights the gap between sending an update and verifying the endpoint has completed it.
Threat intelligence · News & analysis
MATCHBOIL’s Changing Disguises Put Endpoint Investigation in Focus
ESET’s new research traces a downloader used against Ukrainian organizations and explains why an apparently harmless program can conceal a second role.
Ransomware · News & analysis
Record Ransomware Claims Demand Careful Reading—and a Recovery Test
Comparitech’s third-quarter report separates confirmed incidents from unverified claims, a distinction that matters when businesses turn threat statistics into spending decisions.
Data breaches · News & analysis
Publica Supplier Breach Shows Why Data Exposure Needs Its Own Response Plan
Swiss authorities confirmed a leak involving a pension fund’s software supplier while investigators were still determining the affected data.
Cybercrime & fraud · News & analysis
Money-Laundering Guilty Plea Exposes the Business Behind Cyber Theft
The Your Mule Cashout case connects stolen business funds with a recruitment and transfer operation, underscoring the need to join technical response with payment controls.
Vulnerabilities & patches · News & analysis
WP Post Author Fixes Put Website Patch Verification Under the Spotlight
Two newly disclosed SQL injection flaws show why website maintenance needs a verified fixed version, not simply a recent update.
Cloud security · News & analysis
AWS SPIRE Blueprint Makes Workload Identity an Operations Decision
New AWS guidance connects machine identity to managed infrastructure, raising practical questions about recovery, ownership and permission design.
Identity & access · News & analysis
Okta Event-Hook Postmortem Highlights a Blind Spot in Identity Automation
An October postmortem reports delayed and dropped events, showing why access workflows need verification beyond successful sign-ins.
Critical infrastructure · News & analysis
Red Lion Switch Advisory Puts Industrial Management Access in Focus
CISA details seven N-Tron 700 Series weaknesses, with a firmware update and changes to management access among the recommended measures.
Industry & business · News & analysis
Netsec’s Funding Round Backs a Single-Operator Model for IT and Security
A raise exceeding $10 million puts service ownership, automation and the economics of managed security in the spotlight for mid-market buyers.
MSP / MSSP · News & analysis
WatchGuard’s October Platform Rollout Gives MSPs an Automation Test
New investigation, application-discovery and access features put the focus on how managed providers validate changes across customer environments.
Policy & compliance · News & analysis
NSA’s OT Guidance Makes Zero Trust an Operating Decision
New guidance for national-security and defense environments gives infrastructure owners a reason to examine access decisions alongside continuity plans.
Security technology · News & analysis
SIM-Based Verification Moves Another Step Into Business Applications
U Mobile and Telenor Linx’s Malaysia launch removes the manual SMS-code step for supported services, while leaving businesses with important recovery and fallback decisions.
AI security · News & analysis
Anthropic’s Free OSS Scanner Moves the Bottleneck From Discovery to Triage
An optional stream of unreviewed AI findings gives open-source maintainers faster access to potential flaws—and a new decision about how much investigation they can absorb.
Vulnerabilities & patches · News & analysis
Atlassian File-Access Flaw Puts Self-Hosted Collaboration Systems on the Patch List
A critical advisory spans eight Atlassian products, making a complete installation inventory the first response task.
Threat intelligence · News & analysis
Real Event Details Give a Google Phishing Campaign Its Cover
Cisco Talos describes targeted invitations and altered QR codes aimed at Taiwan research organizations.
Ransomware · News & analysis
MonsterCloud Charges Put Ransomware Recovery Promises Under Scrutiny
Federal prosecutors allege that a recovery provider secretly paid attackers while selling clients a different explanation.
Data breaches · News & analysis
Advantest’s October Notice Confirms Personal Data Was Taken in February
A newly issued notification separates the earlier intrusion from the personal-data consequences now being communicated to recipients.
Cybercrime & fraud · News & analysis
U.S. Reward Offer Renews Attention on the HAFNIUM Investigation
Rewards for Justice seeks information on Zhang Yu as the case highlights the lasting value of stolen research and correspondence.
Cloud security · News & analysis
Cloud Supply-Chain Attacks Turn Build Credentials Into the Prize
Unit 42 describes how malicious dependencies and blockchain-based coordination reach beyond the infected developer machine.
Identity & access · News & analysis
The Passkey Gap Starts With the Credentials Employers Issue
An Okta and Yubico survey points to onboarding defaults and fragmented sign-in as obstacles to stronger authentication.
AI security · News & analysis
AWS’s AI Triage Guidance Puts Evidence Ahead of Confident-Sounding Findings
New guidance describes repository checks and deployment context for assessing AI-generated vulnerability reports.
Critical infrastructure · News & analysis
EasyIO FG Advisory Leaves Building Operators With a Replacement Decision
Johnson Controls’ retired controller line will not receive a firmware fix for the weaknesses described in a new CISA advisory.
MSP / MSSP · News & analysis
Power BI Phishing Shows Why MSPs Must Track Who Owns Remote Access
Huntress describes trusted-service lures followed by multiple unauthorized ScreenConnect clients on affected endpoints.
Policy & compliance · News & analysis
Europol’s Quantum Warning Starts With the Data Businesses Keep
Two new reports call for phased preparation while distinguishing future cryptographic risk from demonstrated attacks today.
Security technology · News & analysis
GitHub Extends Secret Detection Beyond Recognizable Token Formats
A new classifier aims to identify password-like values from code context, with push protection still in preview.
Industry & business · News & analysis
Hadrian’s $40 Million Raise Adds Momentum to Automated Security Testing
The funding announcement puts continuous exposure management and agentic testing in front of a practical buyer question: what can be independently validated?
Vulnerabilities & patches · News & analysis
FortiMail Zero-Day Forces a Decision Before Patches Arrive
Fortinet reports active exploitation of an email-security flaw and directs customers to workarounds while fixed releases remain forthcoming.
Cloud security · News & analysis
AWS Schedules October 24 Test of Sovereign Cloud Independence
An October 24 independence exercise puts the difference between provider resilience and application resilience on the customer’s agenda.
Identity & access · News & analysis
Auth0’s PrivateLink Gateway Pattern Puts Environment Boundaries in Focus
Auth0’s new architecture guidance routes a private connection to multiple environments, placing gateway rules at the center of the security review.
Critical infrastructure · News & analysis
ABB Advisory Puts Engineering Workstation Privileges Under Review
Two PCM600 weaknesses make service accounts and project-file handling practical priorities for energy operators and their support providers.
Threat intelligence · News & analysis
AI Policy Invitations Become a Doorway to Cloud Accounts
Proofpoint’s new TA419 research puts trusted professional outreach under scrutiny at universities, think tanks and law firms.
Ransomware · News & analysis
Warlock Intrusions Put Domain-Wide Recovery Plans to the Test
New Symantec and Carbon Black research traces ransomware activity from SharePoint access to the systems used to distribute software across an organization.
Data breaches · News & analysis
MetaMask Incident Highlights the Difference Between Custody and Service Continuity
An infrastructure investigation and precautionary validator exits leave businesses with separate questions about asset access, operational recovery and provider updates.
Cybercrime & fraud · News & analysis
KillSec Seizure Creates a New Evidence Trail for Extortion Victims
Hamburg police report arrests and seized infrastructure, while affected businesses still need to preserve their own incident records.
Industry & business · News & analysis
SGS Takes Majority Stake in Prescient Security as Cyber Assurance Expands
The completed transaction brings cybersecurity assessment and compliance services into a larger testing and certification group, putting service continuity on buyers’ agenda.
MSP / MSSP · News & analysis
Auvik and Acronis Plan a Shared Console for Network and Endpoint Management
The September partnership targets January 2027 availability, giving MSPs time to test access boundaries and service workflows before changing their toolsets.
Policy & compliance · News & analysis
Education Department Audit Finds Security Baseline Met but Warns of Regression
A September oversight report separates an effective rating for evaluated systems from the work needed to sustain security and document access decisions.
Security technology · News & analysis
NIST’s Rogue-Cell Research Puts 5G Resilience Back on the Test Agenda
A new draft studies device responses to simulated false base stations and invites feedback through October 31, with implications for mobile-dependent businesses.
AI security · News & analysis
A Patched Manus Flaw Shows Why AI Email Access Needs Tighter Boundaries
Salt Labs’ October 1 research describes a repaired email-to-code attack. For businesses connecting AI agents to inboxes, the practical question is how much authority each task receives.
Vulnerabilities & patches · News & analysis
Exploited Cisco SD-WAN Flaw Puts Network Management on the Emergency List
Cisco’s authentication-bypass warning calls for a release check, restricted management access and a separate investigation into earlier activity.
Threat intelligence · News & analysis
Star Blizzard’s RedFlick Campaigns Turn Familiar Invitations Into an Access Risk
Microsoft’s latest research puts renewed attention on follow-up emails, event invitations and the trust built during ordinary professional exchanges.
Ransomware · News & analysis
Ransomware Recovery Plans Need an Answer for Stolen Data
New Zscaler findings distinguish the growth of stolen data from victim counts—and show why a successful restore cannot settle every extortion incident.
Data breaches · News & analysis
DIVD Links Its Breach to Zammad Zero-Days as Investigation Continues
The Dutch security organization has identified an entry point but has not yet closed its investigation into the affected information.
Cybercrime & fraud · News & analysis
ATM Jackpotting Sanctions Highlight the Gap Between Physical and Cyber Security
Treasury’s action against an alleged criminal network puts attention on the handoff between cash-machine servicing, malware detection and fraud response.
Cloud security · News & analysis
A Password Reset Became a Route Into Cloud Deployment Credentials
Microsoft’s Storm-3068 case study shows why identity recovery, development pipelines and Kubernetes access need a shared incident view.
Identity & access · News & analysis
Entra’s October Sign-In Change Calls for a Browser-Extension Check
Microsoft plans tighter script controls on browser sign-in pages; businesses should test tools that modify the authentication experience.
AI security · News & analysis
OpenAI’s Distillation Disclosure Raises Questions for AI Service Providers
A newly disclosed extraction campaign illustrates why providers need to protect intermediate model artifacts as well as final answers.
Critical infrastructure · News & analysis
Toptech Advisory Puts Terminal Software on the Patch Agenda
CISA identifies serious TMS7 and TopHAT weaknesses and points operators to a release that addresses the reported issues.
MSP / MSSP · News & analysis
Signed Remote-Support Tools Are Becoming a Phishing Foothold
Microsoft describes attackers using MSP360 and ScreenConnect together, making authorization more important than a familiar product name.
Industry & business · News & analysis
Wiz’s New MSP Program Makes Service Accountability a Buying Question
Centralized tenant management and consumption billing promise a more scalable service model; customers still need clear ownership of remediation.
Policy & compliance · News & analysis
October Brings a Budget Decision for Businesses Still Using SMS Authentication
Microsoft’s published transition schedule puts telecom-provider selection later this month, giving businesses a reason to review exceptions and support costs now.
Security technology · News & analysis
Zimbra Research Shows Why Mail-Server Recovery Must Include Authentication Secrets
Microsoft’s new investigation connects a mail-server flaw with persistent access and credential collection, extending the response beyond an update.
Vulnerabilities & patches · News & analysis
Citrix NetScaler Exploitation Raises an Urgent Patching—and Evidence—Decision
CISA warns of active exploitation as administrators weigh emergency updates, service continuity and the need to preserve signs of compromise.
Threat intelligence · News & analysis
Lunex Shows Why a Running Security Agent May Still Be Blind
Ontinue’s research describes an information stealer that interferes with endpoint visibility and persists beyond a simple file removal.
Ransomware · News & analysis
Ryuk Sentencing Puts the Long Tail of Ransomware Recovery in Focus
A federal sentence tied to attacks in 2019 and 2020 illustrates why incident records can matter long after systems are restored.
Data breaches · News & analysis
Bitget Resumes Bitcoin Withdrawals as Breach Investigation Continues
The exchange’s latest account separates a staged service restart from an unfinished inquiry into unauthorized wallet transfers.
Cybercrime & fraud · News & analysis
Telecom Extortion Sentence Underscores the Value of Stolen Call Records
A former U.S. soldier’s 70-month sentence highlights the exposure created by sensitive communications metadata.
Cloud security · News & analysis
Restored GitHub Actions Expose a Hidden Risk in Build-System Recovery
Socket says previously compromised Actions became reachable again with malicious tags intact, reopening questions about trusted dependencies.
Identity & access · News & analysis
Blueprint Alliance Puts AI Agent Ownership at the Center of Identity Security
A cross-vendor initiative proposes a shared architecture for agents, while implementation and interoperability remain the tests ahead.
AI security · News & analysis
NCSC Warns That Autonomous Defense Must Account for Business Disruption
A new assessment puts operational consequences alongside speed when deciding which security actions AI should perform.
Critical infrastructure · News & analysis
Desigo Advisory Turns Building-Graphics Permissions Into a Security Priority
A Siemens vulnerability notice highlights the risk of malicious graphics documents in building-management environments.
MSP / MSSP · News & analysis
Cork Cyber Expands Automated Remediation, Putting Patch Results Under the Microscope
New automation claims give MSPs a practical buying question: what exactly does a closed ticket prove?
Industry & business · News & analysis
Censys Expands Its Partner Program as Exposure Management Moves Into Managed Services
A channel push creates opportunities for service providers—and a need to define who owns the work after an exposure is found.
Policy & compliance · News & analysis
FTC Opens Review of Platform Advertising’s Role in Impersonation Scams
The agency is seeking public input on possible changes, putting scam-ad handling on the agenda for platforms and business advertisers.
Security technology · News & analysis
Microsoft’s Integrated SOC Preview Puts the Analyst Handoff to the Test
The Defender announcement promises a more connected security operation; buyers should evaluate how it handles missing context and uncertain decisions.
Industry & business · News & analysis
Barracuda Targets the Small-Business AI Security Gap
An upcoming AI governance product puts a familiar buying question in focus: can a lean IT team prove its controls work in everyday use?
Threat intelligence · News & analysis
Stolen Cloud Identities Put Recovery Systems in the Line of Fire
Microsoft’s latest Storm-3168 research shows why workload permissions deserve the same scrutiny as human administrator accounts.
Ransomware · News & analysis
The Ransomware Name Changes. The Intrusion Pattern May Not.
New research on Storm-2570 makes the case for investigating the behavior leading up to encryption, rather than waiting for a familiar ransom note.
Data breaches · News & analysis
Cloudflare Fixes Container Data Exposure, Finds No Evidence of Malicious Use
A disclosed isolation flaw offers cloud customers a concrete way to examine how providers handle residual data and incident communication.
Vulnerabilities & patches · News & analysis
CISA Adds SharePoint and MikroTik Flaws to Its Exploited-Vulnerability List
The September 25 additions give businesses a specific inventory check, with remediation decisions grounded in affected products and vendor guidance.
Cybercrime & fraud · News & analysis
Rydox Guilty Plea Shows the Long Afterlife of Stolen Personal Data
A federal prosecution illustrates why identity information can remain useful to criminals well beyond the incident that first exposed it.
Cloud security · News & analysis
Cloud Security Reviews Need to Follow the Token, Not Just the Login
Final CISA and NIST guidance brings token issuance, validation and lifecycle controls into the same security conversation.
Identity & access · News & analysis
A Real Sign-In Page Can Still Be Part of a Phishing Attack
Microsoft’s EvilTokens research puts device-code authorization and post-compromise mailbox access in the spotlight.
AI security · News & analysis
SalesBleed Puts the AI Agent’s Data Permissions Under Scrutiny
Patched Agentforce research shows how an ordinary external business record can become an instruction an AI system should never obey.
Critical infrastructure · News & analysis
CISA and FBI Put Industrial Integrator Access Under the Microscope
New guidance asks operators to examine the data and control they entrust to the companies maintaining industrial systems.
MSP / MSSP · News & analysis
MSP Process Buys Triggr as Service-Desk Automation Moves Closer to Identity
The acquisition combines workflow ambitions with user verification, giving providers a reason to examine how automated requests are authorized.
Policy & compliance · News & analysis
CISA’s CVE Quality Push Puts Vulnerability Data Under Review
A new framework focuses on the foundations beneath patching decisions: governance, participation, infrastructure and dependable records.
Security technology · News & analysis
Cyber Decoys Can Surface Intrusions—If Someone Owns the Response
CISA’s September guidance gives defenders a reason to examine deception technology as an operational capability rather than another alert source.
MSP / MSSP · Editorial announcement
UMIT Technologies Named Cyber Security Journal’s Top MSP Pick for Virginia
Our Virginia selection brings together managed IT, cybersecurity and practical AI, backed by entrepreneurial roots and Upper Mattaponi Tribal ownership.
MSP / MSSP · Company profile
Beyond the Help Desk: UMIT Technologies’ Push Into AI, Cybersecurity and Defense
From its Virginia managed IT roots to SBA 8(a) certification, UMIT Technologies is building a broader future around business technology, cybersecurity and practical AI.
Headlines from our sources
1903 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
Schneier on Security
Studying Fraudulent North Korean IT Workers ↗
ResearchSecurityWeek
Long-Hidden Flaws Patched in EPICS Research Facility Control Software ↗
Industry newsSecurityWeek
Nobody Trusts the Security Questionnaire. We Rely on It Anyway. ↗
Industry newsHelp Net Security
Data breach at Sony-owned internet provider compromises 2.6 million customer records ↗
Industry newsSecurityWeek
Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise ↗
Industry newsHelp Net Security
CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster ↗
Industry newsWIRED Security
ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History ↗
Industry newsSecurityWeek
Hackers Start Probing Fresh Oracle EBS Vulnerability ↗
Industry newsSecurityWeek
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts ↗
Industry newsThe Hacker News
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits ↗
Industry newsSOCRadar
n0n Ransomware: Inside an AI-Assisted Extortion Operation ↗
ResearchThe Hacker News
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering ↗
Industry newsThe Hacker News
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach ↗
Industry newsHelp Net Security
Bellini Capital CISO on AI security governance and the limits of patching faster ↗
Industry newsThe Hacker News
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers ↗
Industry newsThe Hacker News
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws ↗
Industry newsHelp Net Security
AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records ↗
Industry newsDark Reading
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature ↗
Industry newsThe Hacker News
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges ↗
Industry newsHelp Net Security
NIST starts the countdown to retire quantum-vulnerable encryption ↗
Industry newsHelp Net Security
Breach victims discover their data was held by companies they’ve never heard of ↗
Industry newsCIS / MS-ISAC
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution ↗
Threat sharingSANS Internet Storm Center
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th) ↗
ResearchCIS / MS-ISAC
A Vulnerability in Brotli Library Could Allow for Remote Code Execution ↗
Threat sharingDataBreaches.net
Privacy Commissioner of Canada to investigate data breach involving Crime Stoppers ↗
Industry newsAWS Security Blog
Introducing Route 53 Resolved IP Validation for AWS Network Firewall ↗
ResearchDark Reading
3 Frameworks to Protect CISOs & Orgs Against AI Liability ↗
Industry newsDark Reading
External Teams Chats Anchor 15-Minute Malware Delivery ↗
Industry newsCanadian Centre for Cyber Security
Adobe security advisory (AV26-697) – Update 1 ↗
AgencyThe Record