The UK’s data protection watchdog has decided not to purse a criminal investigation against a former healthcare worker who tried to access and sell the medical records of the Princess of Wales. The Information Commissioner’s Office (ICO) began a criminal… Read More "ICO Cautions Healthcare Worker After Princess of Wales Incident"
The “patch everything” model has become technically and operationally unsustainable for mid- to large-scale organizations. Today’s security teams navigate an environment where thousands of new CVEs are published monthly, necessitating a shift from reactive, point-in-time scanning to a disciplined remediation… Read More "What is Vulnerability Remediation? | UpGuard"
The majority of internet-accessible REDCap servers are running outdated software versions, making them prime targets for state-sponsored threat actors, according to internet intelligence firm Censys. A browser-based platform used for building and managing clinical research data in the medical field,… Read More "Majority of Internet-Accessible REDCap Servers Outdated"
The gap between what enterprise endpoint security platforms can do and what most organizations actually do with them is consistent across the industry. It is not a technology problem. The platforms carry the capability. The gap is program investment, operational… Read More "Overlooked EDR Use Cases in Enterprises Security"
Ravie LakshmananJun 18, 2026Hacking News / Cybersecurity News The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons. AI chat links turned into malware delivery paths. macOS… Read More "Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories"
Every major technology shift changes cybersecurity. I’ve spent much of my career working through major technology transitions, from the rise of the commercial internet to mobile and cloud computing. Each shift created new opportunities for innovation, but it also created… Read More "Cybersecurity was built for predictable systems. AI changes the rules"
A cryptocurrency-stealing malware campaign has been spreading by faking its own popularity, dressing up booby-trapped “tools” with bogus GitHub stars, inflated download counts and AI-narrated YouTube tutorials. New analysis from Check Point Research traced the operation to a Rust-based clipboard… Read More "Fake GitHub Stars and AI Videos Mask a Crypto Clipper"
Most guidance published on AI agent security is written for enterprise organizations. It assumes dedicated AI security functions, red teams, platform engineering groups, and the budget to commission purpose-built tooling. If your security team is three people covering five hundred… Read More "Practical MCP Security: A Playbook for Mid-Market Teams"
Well hey y’all. I just got hooked up with this space to somewhat-routinely write about vulnerabilities, cybersecurity, and infosec history. I’m currently at runZero, where I’m the vice president of security research, which basically means that I spend most of… Read More "No Exploits Required – SecurityWeek"
NIST SP 800-53 Rev. 5 Access control (AC), Audit & accountability (AU), Identification & authentication (IA), Configuration management (CM) Widely used baseline for federal and enterprise environments. Maps directly to GPO-enforced controls.[4] NIST SP 800-63B Rev. 4 (2025) 15-character minimum… Read More "Active Directory Hardening: Plan, Checklist, and Best Practices"
