In recent years, EDR killers have become one of the most commonly seen tools in modern ransomware intrusions: an attacker acquires high privileges, deploys such a tool to disrupt protection, and only then launches the encryptor. Besides the dominating Bring… Read More "EDR killers explained: Beyond the drivers"
The US Cybersecurity and Infrastructure Security Agency (CISA) has told all federal civilian agencies to patch a critical remote code execution (RCE) vulnerability in a Cisco firewall product, as ransomware actors circle. CVE-2026-20131 affects the web-based management interface of Cisco… Read More "CISA Orders US Government to Patch Maximum Severity Cisco Flaw"
CISOs, die einer neuen Branche durchstarten möchten, sollten außerdem möglichst früh demonstrieren, dass ihre bisherigen Erfolge auch für das neue Unternehmen relevant sind. DiFranco erklärt: “Wenn das, was ein Job-Kandidat geleistet hat, auch auf die Ziele des neuen Unternehmens einzahlt,… Read More "Tipps für CISOs, die die Branche wechseln wollen"
Cybercriminals go after people’s personal information across every kind of online platform, including WhatsApp, Instagram, LinkedIn, Roblox, YouTube and Spotify, not to mention finance apps. No online account is off the table. If one of your own accounts falls victim,… Read More "A quick guide to recovering a hacked account"
A new set of compromised Docker images linked to the Trivy supply chain attack has been identified, expanding the impact of the incident across developer environments and CI/CD pipelines. On March 19, 2026, threat actors compromised Aqua Security’s Trivy vulnerability… Read More "Trivy Supply Chain Attack Expands With New Compromised Docker Images"
Several critical infrastructure organizations in the U.S. were disrupted by Iran-linked cyberattacks that impacted operational technology (OT) devices, according to an urgent warning from federal agencies on Tuesday. In a joint advisory, the FBI, CISA, NSA, EPA, DOE, and United… Read More "Iran-Linked Hackers Disrupt US Critical Infrastructure via PLC Attacks"
Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy. 07 Apr 2026 • , 4 min. read We stand at an interesting point in the never-ending arms race… Read More "As breakout time accelerates, prevention-first cybersecurity takes center stage"
The high-tech sector was the most targeted industry for cyber-attacks in 2025, dethroning financial services as the primary focus of threat actors, according to Mandiant’s latest incident response data. High tech companies accounted for 17% of all Mandiant investigations in… Read More "High-Tech Sector Overtakes Finance as Top Target for Cyber-Attacks"
Identity compromise has become one of the most effective ways for attackers to infiltrate business systems. Firewalls, endpoint protection, and monitoring tools mean little once an attacker logs in using valid credentials. For MSPs and corporate IT teams, strengthening identity… Read More "5 ways to strengthen identity security and improve attack resilience"
Despite a major law enforcement operation earlier this month, Tycoon2FA, a subscription-based phishing-as-a-service (PhaaS) platform, has continued to compromise email accounts and bypass multifactor authentication (MFA). The platform, which intercepts live authentication sessions using adversary-in-the-middle (AITM) techniques, has reportedly resumed… Read More "Tycoon2FA Phishing Service Resumes Activity Post-Takedown"
