Software vulnerabilities discovered using AI tools are being exploited at the same rate as those discovered without the use of AI, a VulnCheck researcher has found. In VulnCheck’s State of Exploitation H1 2026 report, Patrick Garrity, vulnerability researcher, observed that… Read More "Just 1% of AI-Discovered Vulnerabilities Exploited in the Wild"
Data Breaches Explained: Causes, Consequences, and What to Do
A data breach is a security incident where sensitive information is copied, transmitted, viewed, stolen or accessed by an unauthorized individual. Data breaches can involve financial information like credit card numbers or bank account details, protected health information (PHI), personally identifiable information (PII),… Read More "Data Breaches Explained: Causes, Consequences, and What to Do"
5 key takeaways from Black Hat USA 2026
Microsoft’s Yossi Weizman and Echo’s Mor Weinberger showed that recent supply chain attacks such as Shai-Hulud, Trivy, and Megalodon repeatedly used the same patterns: forged commit identities, poisoned tags, workflow abuse, OIDC token misuse, and attempts at evidence erasure. These… Read More "5 key takeaways from Black Hat USA 2026"
The Average Cost of a Data Breach Rises to $5 Million
The average cost of a data breach has risen to almost $5m, analysis of the consequences of cyber incidents which took place during the last year has revealed. The figure was published in the 2026 edition of the annual IBM… Read More "The Average Cost of a Data Breach Rises to $5 Million"
Exploits Explained: How They Work, Types, and Mitigation
An exploit is a piece of software, data or sequence of commands that takes advantage of a vulnerability to cause unintended behavior or to gain unauthorized access to sensitive data. Once vulnerabilities are identified, they are posted on Common Vulnerabilities and Exposures (CVE). CVE… Read More "Exploits Explained: How They Work, Types, and Mitigation"
RussianTA488 Returns With Persistent Outlook Web Access Attack
A Russia-aligned espionage group has resurfaced after months without observed activity, using a half-click exploit against on-premises Outlook Web Access (OWA) to plant a browser-resident implant and establish server-side persistence that can survive credential rotation and device re-imaging. According to… Read More "RussianTA488 Returns With Persistent Outlook Web Access Attack"
No Hackers Required: 10 Shadow AI Leaks Hiding in Plain Sight
“The call is coming from inside the house.” It’s one of horror’s oldest lines, and you already know how the scene goes. The team scrambles, rechecks every firewall, audits every login, hunting for an intruder. Then the trace comes back,… Read More "No Hackers Required: 10 Shadow AI Leaks Hiding in Plain Sight"
LogoKit Phishing Kit Screenshots Victim Sites in Real Time
A phishing-as-a-service (PaaS) platform has been observed building a unique login page for each victim in real time, pulling a live screenshot of the target organization’s own website to use as the page background. According to new research from Barracuda… Read More "LogoKit Phishing Kit Screenshots Victim Sites in Real Time"
Vendor Risk Management Checklist (Updated 2026)
Vendor Risk Management (VRM) is a broad category that encompasses all measures that your organization can take to prevent data breaches and ensure business continuity. Legal issues, past performance, and creditworthiness are some of the common VRM issues that all… Read More "Vendor Risk Management Checklist (Updated 2026)"
China-Linked APT Expands Proxy Network With New Malware
A China-linked hacking group has been observed expanding a network of hijacked devices used to disguise cyber-attacks, arming it with several newly discovered pieces of custom malware, researchers have found. Cisco Talos said the actor, an advanced persistent threat (APT)… Read More "China-Linked APT Expands Proxy Network With New Malware"