Phishing attacks make up over 90% of all data breaches (according to Cisco’s 2021 Cybersecurity Threat Trends Report), far outnumbering malware and ransomware attacks, affecting millions of users yearly. The main issue with phishing attacks is that users and organizations… Read More "19 Most Common Types of Phishing Attacks in 2026"
End-to-end encrypted (E2EE) Rich Communication Services (RCS) messaging is being rolled out in beta between iPhone and Android handsets, closing one of the longest-running interoperability gaps in mainstream mobile messaging. Apple announced the beta rollout on May 11, with Google confirming… Read More "Apple Rolls Out E2EE for RCS Across iPhone and Android"
The National Institute of Standards and Technology (NIST) has responded to the increased prevalence of third-party risks by specifying industry standards for securing the supply chain attack surface – the attack surface most vulnerable to third-party risks. These guidelines consist… Read More "Meeting the Third-Party Risk Requirements of NIST 800-53 in 2026"
A new wave of the Mini Shai-Hulud campaign compromised dozens of TanStack npm packages as part of a broader supply chain attack affecting developer ecosystems, including packages tied to UiPath, Mistral AI, OpenSearch and PyPI. In April, Mini Shai‑Hulud initially targeted… Read More "Mini Shai-Hulud Hits TanStack npm Packages"
.png?w=1140&resize=1140,855&ssl=1 "Meeting the Third-Party Risk Requirements of PCI DSS in 2026")
Organizations must enact effective Third-Party Risk Management (TPRM) programs to ensure their vendors fulfill cybersecurity requirements. Otherwise, they risk carrying the financial and reputational harm caused by customer data breaches. The PCI DSS standard covers aspects of third-party risk management… Read More "Meeting the Third-Party Risk Requirements of PCI DSS in 2026"
Nick Tausek, lead security automation architect at Swimlane, said the Silent Ransom Group’s attack strategy of leaning into trust says a lot about where extortion is heading. “That makes this especially dangerous for law firms,” he said. “Those environments hold… Read More "Employees are unknowingly inviting tech support impersonators into firms, says FBI"
OpenAI has announced Daybreak, a new initiative based on its frontier large language models (LLMs) and its AI-coding assistant, Codex, to help developers build secure software from the ground up. Unveiled on May 12, OpenAI said Daybreak builds from its… Read More "OpenAI Launches ‘Daybreak’ to Help Build Secure By Design Software"
Nearly 93% of healthcare organizations experienced a data breach in the last three years, and most of these events could have been avoided with basic cybersecurity practices. To help healthcare entities mitigate cybersecurity risks and increase their data breach resilience,… Read More "The Ultimate Cybersecurity Guide for Healthcare in 2026"
Key findings include the fact that AI is now capable of mass producing high-quality fraudulent documents, as well as automating what the report describes as “the administrative minutia of managing extensive shell company networks.” AI powered systems, it states, can… Read More "Another IT governance headache: AI-enabled sanction evasion"
The education sector has found itself in the crosshairs of a ShinyHunters “pay or leak” extortion campaign following the compromise of Instructure, the company behind the Canvas Learning Management System. The original compromise of Instructure occurred on April 25 with… Read More "ShinyHunters Escalates Canvas Extortion – Infosecurity Magazine"
