.png?w=1140&resize=1140,855&ssl=1 "Best Vulnerability Management Tools and Software in 2026")
Every security team runs vulnerability scans. It’s the follow-up questions that cause headaches: Which of these 12,000 findings matter, who owns the fix, and how do we prove it held? Staring at a massive spreadsheet of identical “Critical” alerts while… Read More "Best Vulnerability Management Tools and Software in 2026"
Canadian electricity provider London Hydro is investigating a data breach that potentially impacted the personal and account information of its customers. London Hydro is a local distribution company serving the City of London, Ontario. It serves roughly 170,000 residential, institutional,… Read More "Canadian Electricity Provider London Hydro Discloses Data Breach"
The leaders of the Five Eyes cybersecurity agencies have warned that frontier AI will “fundamentally” transform offensive and defensive capabilities within months. In a public statement issued on June 22, the UK, US, Canada, New Zealand and Australia called on… Read More "Five Eyes Group Issues Urgent Call to Tackle Frontier AI Threats"
Ravie LakshmananJun 23, 2026Malware / Social Engineering Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script (VBScript) files that lead to the installation of legitimate Remote Monitoring and Management (RMM) software. Per findings from Kaspersky,… Read More "WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool"
That is the contradiction at the heart of modern cybersecurity strategy. We say, “Assume the breach,” but we budget, govern, architect, and rehearse as if the wall will hold. We tell boards compromise is inevitable, then ask for more money… Read More "Cybersecurity is no longer about protection. It’s about survival."
A 10-month Android malware campaign has used nearly 250 fake apps to sign victims up to premium services on their mobile bills, with hardcoded operator targeting for users in Malaysia, Thailand, Romania and Croatia. According to new analysis from Zimperium’s… Read More "Android Malware Used Fake Apps to Charge Users in Mass Billing Scam"
Healthcare technology company Xsolis, Inc. has disclosed a data breach affecting nearly 1.4 million individuals. Tennessee-based Xsolis provides utilization management and revenue cycle solutions for hospitals, health systems, and payers. The company published a data security notice in early June,… Read More "Xsolis Data Breach Affects 1.4 Million Individuals"
A popular developer of open source analytics software has revealed that a recent data breach and extortion incident was caused by the Mini Shai-Hulud campaign which compromised TanStack packages. Grafana Labs, which makes the AI-powered visualization app Grafana, said on… Read More "Grafana Labs Says Code Breach Stemmed from TanStack Attack"
OpenAI on Monday said it’s releasing an improved version of its GPT‑5.5‑Cyber model to trusted defenders as part of the Daybreak initiative, the artificial intelligence (AI) company announced last month. Calling GPT‑5.5‑Cyber its “strongest model yet for finding and helping… Read More "OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws"
A nine-year-old logic flaw in the Linux kernel’s process trace (ptrace) path has been discovered that could let unprivileged local users read sensitive files, including secure shell host (SSH) private keys and the system password hash, on default installations of… Read More "Nine-Year-Old Linux Kernel Flaw Leaks SSH Keys and Password Hashes"
