.png?w=1140&fit=1140,855&ssl=1 "Best TPRM Software for Higher Education: What to Look For")
Higher education institutions don’t run on a single vendor ecosystem. They run on dozens of overlapping ones. Teaching, research, identity, payments, student services, cloud infrastructure, alumni engagement, and campus operations all rely on different third-party vendors. These often enter the… Read More "Best TPRM Software for Higher Education: What to Look For"
Editor’s note: This article contains descriptions of imagery depicting child sexual abuse. Reader discretion is strongly advised. Over the last nine months, Mark Zuckerberg’s Meta has run dozens of paid ads that include explicit AI-generated child sexual abuse material (CSAM)… Read More "Meta Ran Ads That Contained AI-Generated Child Sexual Abuse Imagery"
Swati KhandelwalAug 05, 2026Vulnerability / DevOps An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, no repository write access. A public repository and crafted… Read More "Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup"
An FBI warning has flagged an escalation in the long-running scheme to impersonate the Bureau’s Internet Crime Complaint Center (IC3), with scammers now deploying deepfake videos of senior FBI officials and spoofed IC3 websites to defraud previous fraud victims a… Read More "FBI Warns of Deepfake Videos Impersonating IC3 Leadership"
These are the 26 largest and most consequential data breaches in financial services, current as of July 2026. They span banks, credit bureaus, payment processors, mortgage servicers, insurers, and the technology vendors that sit behind them, and many of the… Read More "26 Biggest Data Breaches in Finance (Updated July 2026)"
OpenAI’s Atlas web browser could have security protections bypassed and be tricked into spamming dozens of WhatsApp contacts or making unauthorized purchases on Amazon, according to new research presented today at the Black Hat cybersecurity conference in Las Vegas. The… Read More "OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts"
The number of US states affected by the recent hacking campaign targeting water and wastewater facilities continues to grow. At least 12 states have been hit, according to ABC News, but the names of only a handful of the affected… Read More "Water Sector Cyberattacks Reportedly Hit at Least 12 States"
Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microsoft’s real authentication page. Once access and refresh tokens are issued, attackers may… Read More "Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk"
For years organizations have strengthened their security posture by investing in specialized tools for applications, identities, endpoints, networks, and cloud infrastructure. Those investments remain essential, but the way attackers operate has changed dramatically. Today’s adversaries move laterally, chaining together weaknesses… Read More "Why security validation must follow the attack path"
More than one new ransomware group is appearing every week as the criminal ecosystem surrounding extortion attacks becomes increasingly more fragmented and continues to expand. Published on July 21, the Black Kite Ransomware Report 2026 identified 146 active ransomware… Read More "A New Ransomware Threat Actor Emerges Every Week, Warns Report"
