A Vendor Risk Assessment (also referred to as a third-party risk assessment) is a critical component of a Vendor Risk Management program. As such, the overall impact of your VRM efforts hangs on the efficiency of your vendor risk assessment… Read More "Implementing A Vendor Risk Assessment Process in 2026"
This story contains descriptions of explicit sexual content and sexual violence. Elon Musk’s Grok chatbot has drawn outrage and calls for investigation after being used to flood X with “undressed” images of women and sexualized images of what appear to… Read More "Grok Is Generating Sexual Content Far More Graphic Than What’s on X"
Jan 07, 2026Ravie LakshmananVulnerability / Enterprise Security Veeam has released security updates to address multiple flaws in its Backup & Replication software, including a “critical” issue that could result in remote code execution (RCE). The vulnerability, tracked as CVE-2025-59470, carries… Read More "Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication"
The more organizations lean on artificial intelligence (AI), spread workloads across different environments, and tie systems together, the harder it becomes for traditional security practices to present a complete picture of what’s going on. The result is a growing number… Read More "How to eliminate IT blind spots in the modern, AI-driven enterprise"
Aligning with a NIST framework is a strategic initiative for any organization serious about cybersecurity. It provides a clear roadmap to defending against sophisticated supply chain attacks, meeting evolving regulatory demands, and managing growing cyber risk exposure from third-party vendors.… Read More "NIST compliance in 2026: A complete implementation guide"
Jan 07, 2026Ravie LakshmananCybercrime / Software Security A cybercrime gang known as Black Cat has been attributed to a search engine optimization (SEO) poisoning campaign that employs fraudulent sites advertising popular software to trick users into downloading a backdoor capable… Read More "Black Cat Behind SEO Poisoning Malware Campaign Targeting Popular Software Searches"
Researchers have released details about a critical vulnerability that was silently patched in n8n, a platform used by many companies to build LLM-powered agents and automated workflows. The flaw can allow unauthenticated attackers to completely take over local n8n deployments,… Read More "Critical RCE flaw allows full takeover of n8n AI workflow platform"
Chinese cyber threat actors intensified effort to gain access to Taiwan’s critical infrastructure organizations in 2025, with a particular emphasis on the energy sector, emergency rescue entities and hospitals. In a new report published on January 4, the National Security… Read More "China intensifies Cyber-Attacks on Taiwan"
The Sarbanes-Oxley Act of 2002 (SOX) was passed by the United States Congress to protect the public from fraudulent or erroneous practices by corporations or other business entities. The law is named after Paul Sarbanes and Michael Oxley, the two… Read More "What is SOX Compliance? 2026 Requirements, Controls and More"
Jan 07, 2026The Hacker NewsEnterprise Security / Artificial Intelligence Non-human employees are becoming the future of cybersecurity, and enterprises need to prepare accordingly. As organizations scale Artificial Intelligence (AI) and cloud automation, there is exponential growth in Non-Human Identities (NHIs),… Read More "The Future of Cybersecurity Includes Non-Human Employees"
