OPINION Last week, my colleagues at ESET Labs found hackers intentionally tripping AI-safety guardrails with a nuclear weapon prompt — a novel technique named GuardBreaker that is designed to interfere with AI-assisted malware analysis. In this case, Russia-aligned UAC-0099 used… Read More "AI Governance Can’t Wait"
Managing the vendor remediation process is no small feat. While on the surface, it might seem like the bulk of the heavy lifting is done once you complete your initial assessment, you (and every other security team on the planet)… Read More "Remediation Made Easy: Reducing Risks and Driving Vendor Action"
Dubai-based security firm SpiderSilk puts on an adversarial hat when scanning for Internet-facing threats affecting companies. SpiderSilk’s scanning technologies require only a company’s name, not a customer’s list of IP addresses and domains. Within a few hours, the tools scan… Read More "SpiderSilk Uses AI to Scan for Cyber Threats"
Cyber supply chain risk management (C-SCRM) is the process of identifying, assessing, and mitigating cybersecurity risks associated with an organization’s supply chain. Supply chains comprise multiple attack vectors, ranging from procurement tools to suppliers, developers, and third-party services. The complexity… Read More "What is Cyber Supply Chain Risk Management?"
A user tries to start their workday, but their laptop is stuck in a “blue screen of death” loop. Halfway across the world, someone tries to post on X, but nothing loads. These are the real-world ripple effects of a… Read More "CISA Calls for More Guidance, Less Spin, as Outages Escalate"
Most vendor risk programs still rely on periodic assessments that capture a single snapshot of a vendor’s security posture, then go silent for months while that posture changes. Attackers exploit those same gaps between scheduled reviews, and the numbers prove… Read More "Top Vendor Risk Monitoring Solutions for Continuous Oversight"
New York healthcare provider Premier Medical Group (PMG) is notifying over 280,000 patients that their personal and medical information was stolen in a data breach. PMG offers in-depth patient care across cardiology, dermatology, gastroenterology, neurology, plastic surgery, gynecology, and internal… Read More "280,000 Impacted by Premier Medical Group Data Breach"
Ravie LakshmananSep 16, 2026Vulnerability / Linux Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild. The vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8),… Read More "Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks"
Artificial intelligence (AI) is enabling threat actors to send unholy volumes of fraudulent emails, personalized to a degree that mass emailers of old couldn’t have touched. Last month, Microsoft researchers tracked a phishing campaign in which an unattributed threat actor… Read More "Threat Actor Generates 1M Personalized Fraud Emails in 3 Days"
Vendor risk assessments need to be tailored to the unique cyber risk criteria of third-party vendors. This post explains how to determine which risk criteria apply to each vendor and how to measure their severity. Those criteria sit inside a… Read More "Key Vendor Risk Assessment Criteria and How to Apply Them"
