Security researchers have released details of two zero-day vulnerabilities found in TP-Link security cameras commonly used in home and small offices, one of which could enable attackers to spy on users. OPSWAT said the bugs affect the TP-Link Tapo C200… Read More "Zero-Day Flaw in TP-Link Cameras Enables Covert Eavesdropping"
What is Cyber Supply Chain Risk Management?
Cyber supply chain risk management (C-SCRM) is the process of identifying, assessing, and mitigating cybersecurity risks associated with an organization’s supply chain. Supply chains comprise multiple attack vectors, ranging from procurement tools to suppliers, developers, and third-party services. The complexity… Read More "What is Cyber Supply Chain Risk Management?"
In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy… Read More "In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats"
Microsoft: AI Cuts Post-Compromise Attack Time to Minutes
AI has enabled threat actors compressed parts of the cyber-attack lifecycle from “days to minutes”, presenting a major challenge for defenders, Microsoft’s Digital Defense Report 2026 has warned. The tech giant said that attackers are getting to the advantages of… Read More "Microsoft: AI Cuts Post-Compromise Attack Time to Minutes"
Vendor Risk Management Examples (3 Scenarios)
You understand the importance of a Vendor Risk Management strategy in mitigating the impact of third-party data breaches. However, you’re still unsure about its application to different vendor cyber risk contexts. To help you bridge this application gap and leverage… Read More "Vendor Risk Management Examples (3 Scenarios)"
macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
A macOS dropper has been found inside a disguised Zoom client. The malware is tracked as CloudSyncD and is designed to deliver a persistent and stealthy backdoor. Researchers at Jamf first noticed this malware still in development in mid-September. Within… Read More "macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor"
Why CISOs Struggle to Answer the Board’s Three Hardest Questions, and How to Fix the Report
The quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner, the SIEM and the EDR console. Someone is building a spreadsheet to reconcile them. Someone… Read More "Why CISOs Struggle to Answer the Board’s Three Hardest Questions, and How to Fix the Report"
Cyber-Attacks Cost Organizations $52,000 on Average
Nearly a third (29%) of organizations globally have been hit by at least one successful cyber-attack in the past 12 months, with incidents having substantial financial, operational and human impacts on victims. The Hiscox Cyber Readiness Report 2026 found that… Read More "Cyber-Attacks Cost Organizations $52,000 on Average"
How to Choose Automated Vendor Risk Remediation Software
Vendor security findings pile up faster than many teams can chase vendors to fix them. A queue with no order is only a to-do list, and the data behind it is often shaky. In its 2026 global survey, KPMG found… Read More "How to Choose Automated Vendor Risk Remediation Software"
Crypto Scammers Hijack Microsoft’s Official X Account
Microsoft has confirmed that its official X account was taken over on Thursday and used to amplify a Clippy-themed cryptocurrency account. According to The Verge, the company’s account, which has more than 13 million followers, started following the crypto account… Read More "Crypto Scammers Hijack Microsoft’s Official X Account"