A new cyber threat group linked to the Iranian government has been targeting Israeli government and IT organizations since early 2026, according to Check Point Research. The group, tracked by the Tel Aviv-headquartered cybersecurity firm as ‘Cavern Manticore,’ shares technical… Read More "New Iran-Nexus Hacking Group Targets Israel Government and IT Sectors"
Google on Thursday rolled out a fresh Chrome 151 update that patches 41 critical- and high-severity vulnerabilities. Over two dozen security defects are memory safety bugs that could lead to data corruption, crashes, and arbitrary code execution. The latest Chrome… Read More "Critical Vulnerabilities Patched With Chrome 151 Update"
Swati KhandelwalAug 06, 2026Ransomware / Cybercrime A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau to 16 years in prison on August 5 for creating and running Ransom Cartel, the ransomware-as-a-service operation he stood up in 2021. Between 2021 and… Read More "Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service"
After more than 300,000 production penetration tests (pentests), our company has learned something that may surprise people watching the recent wave of autonomous security announcements. The hardest problem in autonomous security isn’t teaching a machine how to attack. It’s teaching… Read More "Autonomy is earned, not claimed"
Users of Google’s Gemini Enterprise Agent Platform and AI Threat Defense can leverage CodeMender, now a fully managed AI code security agent built for the enterprise, to find and fix vulnerabilities. Developed by Google DeepMind, CodeMender was officially introduced in October… Read More "Google Makes CodeMender Available as Managed AI Security Agent"
Looking back at 2025, two mega-trends from the past have continued: First, data breaches remained a constant and continued to trend upward; and second, there was once again a headline disaster no one anticipated. The first point needs no elaboration;… Read More "Cybersecurity Predictions for 2026: Human Risk, AI Data Leaks, and the Next Big Breach"
Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an agent’s tools with no check that a model turn had authorized them. In several of the attack paths, the model… Read More "AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model"
Cybersecurity is full of frameworks, regulations, and directives that tell organizations what they should do. Zero Trust, NIST, CIS Controls, CMMC, DORA, NIS2, and now Continuous Threat Exposure Management (CTEM) all provide valuable guidance and describe desired outcomes. The challenge… Read More "CTEM isn’t failing. It’s not being operationalized"
A newly disclosed vulnerability in the Ubuntu component that isolates snap applications has been found to hand full root access to any local user on default installations of Ubuntu Desktop 24.04, 25.10 and 26.04. According to new research from the… Read More "Ubuntu snap-confine Vulnerability Enables Local Root Access"
Oracle’s July 2026 Critical Patch Update (CPU) is nearly three times larger than any release in the company’s history. To understand it, we parsed all 23 of Oracle’s quarterly advisories going back to 2021, matched them against the official CVE… Read More "Oracle Just Shipped 1,449 Security Patches in One Quarter. We Checked How Much of It Is Actually New."
