With cybercriminals continuously improving their breach tactics, the tech industry can no longer solely rely on point-in-time cyber resilience evaluations like penetration testing. Point-in-time assessments now must be combined with continuous attack surface management for the most comprehensive awareness of… Read More "Choosing a Tech Attack Surface Management Product in 2026"
Jan 09, 2026Ravie LakshmananVulnerability / Endpoint Security Trend Micro has released security updates to address multiple security vulnerabilities impacting on-premise versions of Apex Central for Windows, including a critical bug that could result in arbitrary code execution. The vulnerability, tracked… Read More "Trend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On-Prem Windows Versions"
Jamie Norton’s parents gave him a computer as a child that he played and tinkered with while growing up. When he went to university, he studied IT and accounting “just as a bit of a side note, really.” This was… Read More "Jamie Norton’s journey to CISO started with an early interest in computers"
Have you ever received a package you never ordered? It could be a warning sign that your data has been compromised, with more fraud to follow. 23 Dec 2025 • , 5 min. read Global e-commerce sales are predicted to… Read More "What are brushing scams and how do I stay safe?"
It’s easy for cybersecurity teams to think they’re doing everything to stay ahead of data breaches and cyberattacks in this post-pandemic era. For instance, you’ve probably rallied qualified experts to augment your IT ecosystem and supplied them with state-of-the-art threat… Read More "9 Third-Party Risk Cyber Gaps in 2026"
Viele KRITIS-Einrichtungen wie Energieversorger verzichten auf verschlüsselte Funknetze. Mangkorn Danggura – shutterstock.com Etliche Einrichtungen der kritischen Infrastruktur in Deutschland kommunizieren mit ungeschützter Funktechnik. Der Digitalfunk zahlreicher Haftanstalten, Flughäfen und Energieversorger lässt sich mit geringem technischen Aufwand auch aus der Ferne… Read More "Funk von kritischer Infrastruktur leicht abhörbar"
Reusing passwords may feel like a harmless shortcut – until a single breach opens the door to multiple accounts 08 Jan 2026 • , 4 min. read Reusing the same password across multiple accounts may be convenient, but it sets… Read More "What it is and how to protect yourself"
Data breaches in the Healthcare sector are on an upward trend. The best chance for inverting this trend is for the healthcare sector to implement a cyber risk management program that can keep up with the rate at which cyber… Read More "Choosing a Healthcare Cyber Risk Remediation Product in 2026"
Jan 09, 2026Ravie LakshmananMobile Security / Email Security The U.S. Federal Bureau of Investigation (FBI) on Thursday released an advisory warning of North Korean state-sponsored threat actors leveraging malicious QR codes in spear-phishing campaigns targeting entities in the country. “As… Read More "FBI Warns North Korean Hackers Using Malicious QR Codes in Spear-Phishing"
The National Institute of Standards and Technology (NIST) has responded to the increased prevalence of third-party risks by specifying industry standards for securing the supply chain attack surface – the attack surface most vulnerable to third-party risks. These guidelines consist… Read More "Meeting the Third-Party Risk Requirements of NIST 800-53 in 2026"
