The time between vulnerability disclosure and exploitation has plunged 94% over the past five years as threat actors weaponize so-called “n-days,” according to a new Flashpoint study. The threat intelligence vendor claimed that “time to exploit” (TTE) dropped from 745 days… Read More "Time to Exploit Plummets as N-Day Flaws Dominate"
Ravie LakshmananFeb 12, 2026Vulnerability / Network Security A significant chunk of the exploitation attempts targeting a newly disclosed security flaw in Ivanti Endpoint Manager Mobile (EPMM) can be traced back to a single IP address on bulletproof hosting infrastructure offered… Read More "83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure"
The Trump administration is suspending US support for the Global Forum on Cyber Expertise (GFCE) and the European Centre of Excellence for Countering Hybrid Threats (Hybrid CoE) as part of an exit from international organizations. President Donald Trump signed an… Read More "US To Leave Global Forum on Cyber Expertise"
Ravie LakshmananFeb 12, 2026Zero-Day / Vulnerability Apple on Wednesday released iOS, iPadOS, macOS Tahoe, tvOS, watchOS, and visionOS updates to address a zero-day flaw that it said has been exploited in sophisticated cyber attacks. The vulnerability, tracked as CVE-2026-20700 (CVSS… Read More "Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Apple Devices"
It’s not all bad. Some of the agents discuss ways to make their users’ lives easier by proactively identifying and fixing problems while the humans sleep. And one of the most popular posts, with over 60,000 comments, is about how… Read More "What CISOs need to know about the OpenClaw security nightmare"
Nike appears to be in full-on incident response mode after a ransomware group claimed to have posted a huge cache of stolen internal data. The World Leaks group added Nike to its leak site last week, with the countdown expiring… Read More "WorldLeaks Ransomware Group Claims 1.4TB Nike Data Breach"
Who’s to blame when the AI tool managing a company’s compliance status gets it wrong? 07 Aug 2025 • , 3 min. read If you put a group of CISOs in a room, they are all likely to wait for… Read More "Policy compliance & the cybersecurity silver bullet"
A new high-severity zero-day vulnerability in Microsoft Office has been exploited in the wild, according to Microsoft. The tech giant released a patch in a January 26 advisory for the flaw which has been summarized as an over-reliance on untrusted… Read More "Microsoft Releases Patch for Exploited Office Zero Day"
Darren Meyer, Security Research Advocate bei Checkmarx, beobachtet regelmäßig viele Angriffe auf Entwickler, die er als “Low Effort” einstuft – etwa schadhafte Versionen beliebter Open-Source-Utilities, die auf Typosquatting-Domains gehostet werden. Diese “Spray and Pray”-Bemühungen stellten aber nur eine Seite der… Read More "Entwickler werden zum Angriffsvektor | CSO Online"
Is your phone suddenly flooded with aggressive ads, slowing down performance or leading to unusual app behavior? Here’s what to do. 08 Aug 2025 • , 5 min. read There are various bad things that could end up on your… Read More "What is it, and how do I get it off my device?"
