When corporate data is exposed on a dedicated leak site, the consequences linger long after the attack fades from the news cycle 12 Feb 2026 • , 6 min. read In the realm of cybercrime, change is arguably the only… Read More "How ransomware groups tighten the screws on victims"
Two newly disclosed vulnerabilities in the Avada Builder WordPress plugin have placed around one million sites at risk of arbitrary file read and SQL injection attacks. According to analysis from Wordfence published on May 12, the flaws were reported by… Read More "Avada Builder Flaws Expose One Million WordPress Sites"
FERPA (the Family Educational Rights and Privacy Act) is a United States federal law protecting the privacy of student education records, more specifically governing access from public entities, such as employers, public schools, and foreign governments. FERPA also gives parents… Read More "FERPA Compliance Guide (Updated 2026)"
A vulnerability in open source, self-hosted Git service Gitea could have allowed unauthenticated attackers to pull private container images from over 30,000 deployments, AI pentesting firm NoScope warns. Tracked as CVE-2026-27771, the security flaw is described as an access control… Read More "Gitea Vulnerability Exposed 30,000 Deployments to Attacks"
Announced today, the project will commit $5 billion and 20,000 IBM and Red Hat engineers to build a new ‘enterprise clearinghouse’ to accelerate discovery and remediation of vulnerabilities in open source software. The companies say the clearinghouse will serve as… Read More "IBM and Red Hat want to become the ‘security clearinghouse’ for open source applications in the enterprise"
Start using a new app and you’ll often be asked to grant it permissions. But blindly accepting them could expose you to serious privacy and security risks. 27 Feb 2026 • , 5 min. read App permissions are almost like… Read More "Mobile app permissions (still) matter more than you may think"
Canvas Learning Management System maker Instructure has come to terms with the cybercriminal extortion group responsible for data stolen in last month’s breach affecting nearly 9000 educational institutions. In an incident update, the Utah-based education technology firm said it had… Read More "Canvas Maker Instructure Reaches Agreement With Cybercriminals"
A third-party monitoring solution is essential for providing a level of risk visibility required by a successful Third-Party Risk Management (TPRM) program. This post ranks the top third-party monitoring services in the market. Ten best third-party monitoring tools in 2026… Read More "Top Third-Party Monitoring Solutions in 2026"
The North Atlantic Drift, an extension of the Gulf Stream, brings warm waters to the west coast of France. The AI Coding Drift is something altogether more chilling and global. France-based Edamame has a new solution for the latter. Developers… Read More "New Edamame Platform Aims to Catch AI Coding Agents Going Off the Rails"
In this roundup, Tony looks at how opportunistic threat actors are taking advantage of weak authentication, unmanaged exposure, and popular AI tools 28 Feb 2026 With the second month of 2026 (almost) behind us, it’s time for ESET Chief Security… Read More "This month in security with Tony Anscombe – February 2026 edition"
