Threat actors are eschewing traditional malware-driven attacks in order to bypass security tools and socially engineer their victims, according to a new study from Bridewell. The consulting specialist made the claims in its Cyber Threat Intelligence Report 2026, published on May… Read More "Hackers Bypass Security Tools to Target Users Directly"
A popular open source developer has revealed that hackers stole its codebase and tried to blackmail the firm into paying a ransom. Grafana Labs produces AI-powered analytics and visualization app Grafana. It said in a series of posts on X… Read More "Grafana Labs Confirms Hackers Stole Source Code"
The frequency of cyber-attacks on customer-facing mobile apps has increased rapidly over the past few years, as AI reduces skill, time and cost barriers for threat actors, according to Digital.ai. The DevOps specialist collected telemetry from billions of application instances… Read More "Agentic AI Accelerates Software Builds and Mobile App Attacks"
With the advent of AI-powered vulnerability scanning tools, there is arguably no reason for technology firms to be unaware of bugs in their products, according to the European Union Agency for Cybersecurity’s (ENISA) chief cybersecurity officer. “Now, there is no… Read More "AI Raises the Bar on Vulnerability Awareness and Secure-by-Design Soft"
Efficient cyber threat detection is the cornerstone of an effective cybersecurity program. This post ranks the top eight cyber threat detection tools dominating the cybersecurity solution market in 2026. What is a cyber threat detection tool? A cyber threat detection… Read More "Top 8 Cyber Threat Detection Tools in 2026"
Microsoft has cracked down on Fox Tempest, a cyber threat actor that fueled Rhysida ransomware attacks and developed tools for major malware strains like Oyster, Lumma Stealer, and Vidar. On May 19, the tech giant unsealed a legal case in… Read More "Microsoft Takes Down Group Operating Ransomware-Enabling Signing Tool"
Are you confident your vendors can withstand a cyber attack? If not, you should continuously evaluate your third-party security, especially if you’re sharing sensitive customer data across your vendor ecosystem. In this post, we break down the concepts of third-party… Read More "Third Party Security: Building Your Vendor Risk Program in 2026"
Ravie LakshmananJun 20, 2026Vulnerability / Web Security Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that’s installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information… Read More "Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys"
Security leaders must urgently accelerate transition plans to post-quantum cryptography (PQC) through more proactive inventorying, procurement and crypto-agility efforts, a leading security expert has argued. Speaking at Infosecurity Europe on June 3, Forescout VP of security intelligence, Rik Ferguson, warned… Read More "Infosecurity Europe: Raise Security Concerns with Procurement Now, Bec"
Cyber threat monitoring is critical for effective cybersecurity, yet most organizations operate with gaping blind spots. In this post, we shed some light on the limitations of conventional approaches to help you achieve comprehensive visibility of your attack surface. Why… Read More "What Is Cyber Threat Monitoring in 2026?"
