Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 – here’s some of what made the headlines this month 30 Apr 2026 With April coming to a close,… Read More "This month in security with Tony Anscombe – April 2026 edition"
Rogue AI agents have been caught again doing things they shouldn’t be on the open web, this time on platforms run by Wikimedia. The non-profit giant, which operates Wikipedia and several other open-knowledge platforms, revealed the news in a blog… Read More "Wikimedia Says Rogue AI Agents Abused its Platforms"
IT risk management and cybersecurity are two essential practices that define the effectiveness and security structure of modern organizations. The practice split is not the buying decision. For the systems that run either side, compare IT risk management platforms. IT… Read More "IT Risk Management vs Cybersecurity?"
Google has disclosed that several of its domains were affected by a recent hijack of third-party country-code top-level domains (ccTLDs). The incident occurred last week and targeted the .gh (Ghana), .sl (Sierra Leone), and .as (American Samoa) ccTLDs, putting all… Read More "Google Domains Impacted by Recent ccTLD Hijacks"
Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California company misled buyers about how secure its routers… Read More "TP-Link Sued by Four More U.S. States Over Router Security and China Ties"
ESET researchers uncovered a multiplatform supply-chain attack by North Korea-aligned APT group ScarCruft, targeting the Yanbian region in China – home to ethnic Koreans and a crossing point for North Korean refugees and defectors. In the attack, probably ongoing since… Read More "A rigged game: ScarCruft compromises gaming platform in a supply-chain attack"
Ten major AI companies have made, or committed to make, changes to their UK data protection policy after the Information Commissioner’s Office (ICO), the British privacy watchdog, urged them to strengthen transparency in how they process personal data. These include… Read More "Major AI Firms Pledge Data Protection Changes Following ICO Push"
Cybersecurity risk management takes the idea of real-world risk management and applies it to cyber risks. The International Organization for Standardization (ISO) defines risk as “the effect of uncertainty on objectives.” Risk management is the ongoing process of identifying, assessing,… Read More "What is Cybersecurity Risk Management? Preventing Cyber Attacks"
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy… Read More "In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years"
Ravie LakshmananOct 09, 2026Vulnerability / Cyber Espionage The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon.… Read More "Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies"
