Often regarded as the Californian version of the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) aims to protect the personal information rights of Californian-based employees, contractors, customers, and vendors. The inclusion of third-party vendors means your… Read More "Free CCPA Vendor Questionnaire Template (2026 Edition)"
Atlassian and Splunk on Wednesday announced patches for multiple vulnerabilities in their products, including critical-severity flaws. Splunk resolved a critical issue in AI Toolkit that could allow authenticated attackers with admin roles to execute arbitrary OS commands on the host… Read More "Atlassian, Splunk Patch Critical Vulnerabilities"
What kind of deceptions do you see being applied to cloud or hybrid environments? The deception in the cloud and hybrid world involves the strategic placement of fake assets, credentials, breadcrumbs and workloads throughout cloud services, cloud endpoints, identities, and… Read More "How Deception Works in Cloud and Hybrid Environments"
Ravie LakshmananJun 18, 2026Vulnerability / Cloud Security F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected systems. The vulnerabilities are listed below – CVE-2026-42530… Read More "F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution"
The UK’s data protection watchdog has decided not to purse a criminal investigation against a former healthcare worker who tried to access and sell the medical records of the Princess of Wales. The Information Commissioner’s Office (ICO) began a criminal… Read More "ICO Cautions Healthcare Worker After Princess of Wales Incident"
The “patch everything” model has become technically and operationally unsustainable for mid- to large-scale organizations. Today’s security teams navigate an environment where thousands of new CVEs are published monthly, necessitating a shift from reactive, point-in-time scanning to a disciplined remediation… Read More "What is Vulnerability Remediation? | UpGuard"
The majority of internet-accessible REDCap servers are running outdated software versions, making them prime targets for state-sponsored threat actors, according to internet intelligence firm Censys. A browser-based platform used for building and managing clinical research data in the medical field,… Read More "Majority of Internet-Accessible REDCap Servers Outdated"
The gap between what enterprise endpoint security platforms can do and what most organizations actually do with them is consistent across the industry. It is not a technology problem. The platforms carry the capability. The gap is program investment, operational… Read More "Overlooked EDR Use Cases in Enterprises Security"
Ravie LakshmananJun 18, 2026Hacking News / Cybersecurity News The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons. AI chat links turned into malware delivery paths. macOS… Read More "Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories"
Every major technology shift changes cybersecurity. I’ve spent much of my career working through major technology transitions, from the rise of the commercial internet to mobile and cloud computing. Each shift created new opportunities for innovation, but it also created… Read More "Cybersecurity was built for predictable systems. AI changes the rules"
