1 · It runs every day
A scheduled task runs in the early hours and goes through the active categories.
Risk, identity, incident response and compliance.
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Read the entry →
Cybersecurity
Google took two months to patch an unauthenticated RCE vulnerability in its developer documentation infrastructure. The problem was a reuse…
Read →Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
Read →The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
Read →Microsoft has reminded customers that systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will stop receivin…
Read →
Cybersecurity
Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed …
Read →
Cybersecurity
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Comp…
Read →The cyberattacks that shook the South Korean financial sector earlier this month were launched by a Chinese hacker using the ARTEX AI penet…
Read →Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection wi…
Read →The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.
Read →Welcome to another gangbuster year for strategic M&A activity in cyber, with 117 deals announced in the latest quarter. What's different: M…
Read →Those closest to executives must match their security postures because the weakest link in a family can become the entry point for attacks.
Read →As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.
Read →Cavero Secure, a pioneer in continuous identity security and post-quantum trust architectures, are announcing a breakthrough approach to au…
Read →A now-patched vulnerability in AWS Bedrock AgentCore could allow an attacker to use one AI chatbot to take over an organization's entire fl…
Read →The first cybercriminal to ever make the FBI's "10 Most Wanted Fugitives" list allegedly infused Tren de Aragua's violent criminal operatio…
Read →Cyber-espionage actor UAC-0099 has been steadily refining its flagship dropper in campaigns targeting Ukrainian organizations.
Read →
Cybersecurity
I measured what an AI agent actually holds when it authenticates as me. Authentication turned out to be a token The post The audit log says…
Read →
Cybersecurity
For decades, cybersecurity benefited from a constraint that was easy to take for granted: Attackers were limited by human capabilities. Fin…
Read →
Cybersecurity
Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasin…
Read →
Cybersecurity
The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defraudin…
Read →
Cybersecurity
OpenSSH 10.6, released Tuesday, makes compression less effective and rejects some usernames that previously worked, and the maintainers kne…
Read →
Cybersecurity
HackerOne research shows vulnerability remediation is getting faster, but AI-driven discovery is expanding exposure debt even more quickly,…
Read →SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102…
Read →
Cybersecurity
UK fashion retailer ASOS has confirmed a data breach after a notification claiming hackers had broken into its data was sent to shoppers th…
Read →
Cybersecurity
The US Federal Bureau of Investigation has removed an Accenture contractor working on its PeopleSoft installation over their role in a data…
Read →In this video interview, Nick Kakolowski, senior director for CISO research at IANS, talks AI: budgets, ROI, and changes inside security te…
Read →
Cybersecurity
Dell is urging customers to patch a vulnerability (CVE-2026-86360) in Dell System Update (DSU) that could allow an unauthenticated remote a…
Read →
Cybersecurity
AI is speeding up dependency decisions, making point-of-selection security essential for reducing vulnerable components, downstream tickets…
Read →Drowning in AI-generated bug reports? GitHub has a radical answer: Stop accounts from reporting them. GitHub’s new limits on bug reports ar…
Read →A scheduled process prepares the entries for each category every day; I review them, edit them and add my own from the administration console.
A scheduled task runs in the early hours and goes through the active categories.
Title, summary and analysis, with the source cited and the original link always visible.
It takes the cover image from the source or a stock image with a free-use license.
From the console I approve, correct or write my own entries and articles.
An open conversation to share knowledge. Messages reach my console and I reply from there.
Pick the day and time that work for you. Thirty minutes, no sales pitch.
For a video call, just ask for one here and I'll send you the session link.