An estimated 77% of global organizations experienced at least one Microsoft 365 governance incident over the past year, with overconfidence in AI controls creating new risks, according to ShareGate. The governance specialist ran two surveys of nearly 1800 IT professionals… Read More "Over 75% of Organizations Experience Microsoft 365 Governance Issues"
OpenAI Agent Hacks Australian Medicare Portal
The Australian government has revealed that an OpenAI agent hacked its Medicare Statistics Portal and accessed both public and non-public files. Australian Prime Minister Anthony Albanese said during a press conference on September 24 that the incident occurred in June… Read More "OpenAI Agent Hacks Australian Medicare Portal"
UK Government Shifts to Service-Led Cyber Governance After Audit
The UK government is overhauling its approach to cybersecurity for the British civil service sector, moving away from top‑down mandates toward centrally built services that frontline teams actually adopt and use. “A mandate is permission to direct. It isn’t the… Read More "UK Government Shifts to Service-Led Cyber Governance After Audit"
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
Ravie LakshmananOct 09, 2026Vulnerability / Network Security Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. “CVE-2026-107406 is a memory… Read More "Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments"
CISA Charts New “Quality Era” for Global CVE Program
CISA has set out a framework for improving the quality of CVE data, arguing that the vulnerability identification program must mature as disclosure volumes climb and AI tools speed up discovery. The CVE Program: Establishing a Quality Era Framework document, published… Read More "CISA Charts New “Quality Era” for Global CVE Program"
The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition
The Hacker NewsOct 09, 2026Identity Security / Artificial Intelligence As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The “Horizons of Identity Security”… Read More "The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition"
Emerging Ransomware Gang Uses Backup Destruction Threats
A newly formed ransomware group has claimed that if its victims don’t give into their extortion demands and pay a ransom, that they will destroy their backup infrastructure, in a move which could prevent a targeted organization from operating entirely.… Read More "Emerging Ransomware Gang Uses Backup Destruction Threats"
Best Cyber Risk Posture Management (CRPM) Platforms
The modern security landscape is an unfair fight. The perimeter is gone—replaced by a borderless terrain where a team of one to 10 is expected to defend the same footprint as a 50-person security operations center (SOC). Attack surface. Vendor… Read More "Best Cyber Risk Posture Management (CRPM) Platforms"
Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
Ravie LakshmananOct 09, 2026Vulnerability / Cryptojacking Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are… Read More "Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge"
North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters
North Korea’s Lazarus umbrella operates as six distinct cyber clusters, according to a new analysis of the country’s offensive cyber capabilities. Sekoia and Kudelski Security said the organization reflected a broader effort by North Korea to distribute cyber operations across… Read More "North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters"