Security researchers at Zimperium have discovered a new Android malware strain targeting credential and bank detail harvesting. The malware, named RatHat by the researchers, is linked to threat actors that appear to be operating in China. It incorporates novel techniques… Read More "New ‘RatHat’ Android Malware Leverages AI to Steal Financial Data"
How Do You Determine Vendor Criticality?
Vendor criticality is the level of risk that vendors are categorized into during the risk assessment phase. Determining vendor criticality is an essential part of the third-party risk management (TPRM) program to help organizations better prioritize their risk remediation goals.… Read More "How Do You Determine Vendor Criticality?"
CISA Urges Critical Infrastructure to Plant Decoys Inside Networks
CISA has urged critical infrastructure organizations to plant fake files, accounts and credentials inside their networks to catch attackers who are already past the perimeter. The guidance on cyber decoys, published September 16, is the agency’s first detailed treatment of… Read More "CISA Urges Critical Infrastructure to Plant Decoys Inside Networks"
Brand Impersonation is moving into the App Store
Apple’s 2025 App Store Transparency Report states that the company blocked over $2.2 billion in fraudulent transactions and removed roughly 59,000 apps for bait-and-switch tactics: publishing one thing to gain approval, then swapping in something else once the app goes… Read More "Brand Impersonation is moving into the App Store"
FamousSparrow Swaps SparrowDoor For New SparroWocky Backdoor
The threat actor known as FamousSparrow has replaced its long-running SparrowDoor implant with a new backdoor called SparroWocky, and has been deploying it against governments across Latin America since at least August 2025. ESET Research attributed the campaign to the… Read More "FamousSparrow Swaps SparrowDoor For New SparroWocky Backdoor"
How to Communicate Third-Party Risk to the Board
The following list offers three effective strategies for keeping your board informed of the business’s third-party risk exposure and the efficacy of its Third-Party Risk Management program. The board brief only holds if the TPRM program is defined across those… Read More "How to Communicate Third-Party Risk to the Board"
Incident Response Investigation: First Steps to Stop Threats
Start with the initial detection and pivot across related endpoints, identities, authentication events, network communications, domains, processes, and other available telemetry. Continue expanding the investigation until the team can reasonably determine which systems, accounts, and resources may have been affected.… Read More "Incident Response Investigation: First Steps to Stop Threats"
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes
Ravie LakshmananOct 05, 2026Vulnerability / Email Security Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is rated… Read More "Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes"
Chinese Hackers Impersonate US Officials for AI Cyber Espionage
Chinese hackers impersonated US policymakers in adversary-in-the-middle (AiTM) phishing campaigns aimed at stealing credentials from artificial intelligence (AI) experts working for US think tanks, universities, and legal organizations. Researchers from Proofpoint discovered the campaign, which occurred in July, and attributed… Read More "Chinese Hackers Impersonate US Officials for AI Cyber Espionage"
Manufacturing Accounts for 22% of all Ransomware Victims
Manufacturing organizations made up over a fifth (22%) of all ransomware victims in the period from April 2025 to March 2026, according to new Black Kite study. This made the industry the most targeted by ransomware attacks for the fifth… Read More "Manufacturing Accounts for 22% of all Ransomware Victims"