When publicly accessible without authentication, these endpoints could reveal a lot about an organization’s computing infrastructure, Lava says. The systems that were found exposed included Nvidia Blackwell Ultra B300 GPUs, H200s and H100s used for large-scale AI workloads, as well… Read More "Exposed Nvidia GPU monitors can reveal AI infrastructure secrets"
How come it’s still possible to ‘secure’ an online account with a six-digit string? 07 May 2026 • , 4 min. read The most-used password globally is exactly what you think it is: ‘123456.’ That’s according to NordPass’s latest annual… Read More "Fixing trivial passwords is as easy as 123456"
Ransomware attacks reached their highest ever quarterly volume in the third quarter of 2026, according to an analysis by Comparitech. The firm identified a total of 2627 claimed attacks during the three-month period from July to September 2026. This is… Read More "Q3 2026 Sets New Record for Ransomware Attacks"
Traditional cybersecurity risk management and remediation efforts typically begin with cybersecurity risk assessments and penetration testing. This commonly involved outsourcing to a consultant who would offer the assessment as a standalone service or as part of a larger risk management… Read More "Cybersecurity Risk Assessment Platforms Explained"
Hackers have been exploiting two unpatched vulnerabilities in the AhsayCBS backup solution for remote code execution (RCE), cybersecurity firm Huntress warns. A centralized cloud backup server management console developed by Ahsay Systems, AhsayCBS provides backup policy, storage, and user management… Read More "Unpatched AhsayCBS Vulnerabilities Exploited in the Wild"
Swati KhandelwalOct 09, 2026Vulnerability / Mobile Security Three research teams broke into Google’s Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to… Read More "Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own"
There’s an app for everything nowadays… right? Well, looking up call records for a phone number of choice is not one of those things, as potentially millions of Android users found out after paying for app subscriptions promising just that.… Read More "Fake call logs, real payments: How CallPhantom tricks Android users"
The US, UK and several allied countries have issued a joint alert detailing the tactics, techniques and procedures (TTPs) associated with a sanctioned Chinese organization. The work of Integrity Technology Group has in the past enabled prolific Beijing-backed groups such… Read More "UK Allies Warn of Cyber Threat from China’s Integrity Technology Group"
Effective remediation management is critical as it has the greatest positive influence on your cybersecurity risk management lifecycle. Efficient remediation ensures vulnerabilities are completely addressed, supporting compliance management efforts and a healthy security posture, reducing overall data breach risks. Poor… Read More "Choosing Cyber Risk Remediation Software (Key Features)"
There is a large global market for low-cost Android devices. Bad actors are aware and are servicing the demand through devices built on MediaTek platforms – but with malware preinstalled in the device firmware. When the recipient of such an… Read More "Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries"
