The Trump administration is suspending US support for the Global Forum on Cyber Expertise (GFCE) and the European Centre of Excellence for Countering Hybrid Threats (Hybrid CoE) as part of an exit from international organizations. President Donald Trump signed an… Read More "US To Leave Global Forum on Cyber Expertise"
Phishing attacks make up over 90% of all data breaches (according to Cisco’s 2021 Cybersecurity Threat Trends Report), far outnumbering malware and ransomware attacks, affecting millions of users yearly. The main issue with phishing attacks is that users and organizations… Read More "19 Most Common Types of Phishing Attacks in 2026"
What are the most common CNAPP implementation challenges and how can they be avoided? Three issues frequently derail CNAPP projects: unrealistic expectations about immediate returns, disconnect between development and security teams, and underestimating the time needed for policy customization. Address… Read More "Top CNAPP Vendors 2026 | Fidelis Security"
Jan 08, 2026Ravie LakshmananMalware / Cloud Security Cybersecurity researchers have discovered three malicious npm packages that are designed to deliver a previously undocumented malware called NodeCordRAT. The names of the packages, all of which were taken down as of November… Read More "Researchers Uncover NodeCordRAT Hidden in npm Bitcoin-Themed Packages"
Patching may not be enough The jsPDF maintainers addressed the issue in version 4.0.0 by restricting filesystem access by default. The fix relies on Node.js permission mode, which requires applications to explicitly grant read access to specific directories at runtime.… Read More "Critical jsPDF vulnerability enables arbitrary file read in Node.js deployments"
A long-running cyber-espionage campaign targeting high-value telecommunications infrastructure in South Asia has been attributed to a sophisticated threat actor tracked as UAT-7290. The activity, disclosed by Cisco Talos in an advisory published today, has been ongoing since at least 2022… Read More "China-Linked UAT-7290 Targets Telecom Networks In South Asia"
With violation penalties of up to $100,000 per month until full compliance is achieved, every entity processing cardholder data can’t afford to miss a PCI DSS compliance gap. But with the expanding digital landscape increasing the complexity of information security,… Read More "Choosing a PCI DSS 4.0 Compliance Product in 2026"
As organizations increasingly shift workloads, data, and applications to the cloud, the security landscape becomes more complicated. You’re no longer just managing a single environment, you’re managing dozens of services, containers, and APIs that are all interrelated and deployed across multiple clouds. This increased complexity… Read More "7 Must-Have Features in Your CNAPP Solution"
Chainguard, the trusted source for open source, has a unique view into how modern organizations actually consume open source software and where they run into risk and operational burdens. Across a growing customer base and an extensive catalog of over… Read More "The State of Trusted Open Source"
Vulnerability detection: From zero-days to autonomous pentesting LLMs’ semantic code understanding and contextual reasoning offer a significant advantage over traditional, signature-based static analyzers, especially in the discovery of unknown threats before malicious actors find and exploit them. LLMs have shown… Read More "The 2 faces of AI: How emerging models empower and endanger cybersecurity"
