Vendor security findings pile up faster than many teams can chase vendors to fix them. A queue with no order is only a to-do list, and the data behind it is often shaky. In its 2026 global survey, KPMG found… Read More "How to Choose Automated Vendor Risk Remediation Software"
Microsoft has confirmed that its official X account was taken over on Thursday and used to amplify a Clippy-themed cryptocurrency account. According to The Verge, the company’s account, which has more than 13 million followers, started following the crypto account… Read More "Crypto Scammers Hijack Microsoft’s Official X Account"
Ravie LakshmananOct 02, 2026Artificial Intelligence / Data Security OpenAI has parted ways with three members of its safety team after they leaked private information in violation of company policies, The Wall Street Journal reported. “We have parted ways with three… Read More "OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling"
The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) have issued final guidance for protecting cloud identity tokens and assertions from theft, forgery and misuse, aimed at federal agencies, cloud service providers and… Read More "CISA and NIST Issue Guidance to Protect Cloud Identity Tokens"
A data leak happens when your organization’s sensitive information ends up somewhere it was never meant to be. Common examples include a storage bucket misconfigured to allow public access, credentials hardcoded into a public code repository, a third-party integration exposing… Read More "How to Detect Data Leakage: A Full Guide to Data Leak Detection"
Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with journalists, revealing in new detail how exactly Flock Safety’s cameras track the movements of both vehicles… Read More "Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works"
An Iranian national indicted in the US for hacking hundreds of organizations was extradited from Montenegro this week. Acting on an arrest warrant issued by the FBI, Montenegrin authorities arrested the individual, a dual citizen of Turkey and Iran, on… Read More "In Rare Move, Alleged Iranian State Hacker Extradited to US"
Attackers have been uploading PHP webshells to WordPress sites through a critical flaw in a third-party WooCommerce plugin, four months after a fix was released. In a technical write-up published on September 14, Wordfence said its firewall had blocked more than… Read More "PHP Webshell Campaign Targets WordPress Through Critical WooCommerce P"
Third-party risk assessments identify, evaluate, and mitigate potential risks that third-party vendors might introduce into business operations. These processes form the foundation for a proactive risk management program, meeting regulatory requirements while safeguarding organizational assets and preventing reputational damage. Cyber… Read More "7-Step Third-Party Risk Assessment Process"
Hardly a day goes by lately without news of AI agents autonomously hacking websites or AI tools being used by cybercriminals and scammers. But a recently patched vulnerability in the macOS version of OpenAI’s ChatGPT underscores the potential value to… Read More "A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data"
