Are you confident your vendors can withstand a cyber attack? If not, you should continuously evaluate your third-party security, especially if you’re sharing sensitive customer data across your vendor ecosystem. In this post, we break down the concepts of third-party… Read More "Third Party Security: Building Your Vendor Risk Program in 2026"
Day two of the simulation arrives, and Corman lays out the new reality: Numerous water mains across the country have broken. The man-made drought has spread to hospitals, data centers, refrigeration, and manufacturing. Then Corman throws another curveball: He plays… Read More "What Happens if China Hacks the US Water Supply? I Went to a Secret War Game to Find Out"
A vulnerability in Google Cloud’s Dialogflow CX service could have allowed attackers to silently control agents, manipulate conversations, and exfiltrate sensitive information, Varonis reports. Dialogflow CX is an enterprise-grade conversational AI platform that allows organizations to build complex virtual agents… Read More "Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations"
New research shows that a signed Git commit’s hash is not the one-of-a-kind name that much of the software world assumes it to be. Given any signed commit, someone without the signing key can mint a second commit with the… Read More "GitHub ‘Verified’ Commits Can Be Rewritten Into New Hashes Without Breaking Signatures"
A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and publishing it publicly, exposing a broader risk as enterprises deploy AI agents with privileged access to software development environments, according to new research… Read More "GitHub AI agent leaks private repositories via prompt injection attack"
A new cyber-attack targets consumers and small and medium businesses worldwide to both steal sensitive cryptocurrency data and mine Monero, a decentralized cryptocurrency focused on private, untraceable transactions. The malicious campaign was first detected by Unit 42, the research arm… Read More "New Malicious Campaign Delivers Vidar Stealer and Monero Crypto Miner"
Efficient cyber threat detection is the cornerstone of an effective cybersecurity program. This post ranks the top eight cyber threat detection tools dominating the cybersecurity solution market in 2026. What is a cyber threat detection tool? A cyber threat detection… Read More "Top 8 Cyber Threat Detection Tools in 2026"
Adult content creator Laura Lux says she has been publishing pictures of herself online for almost two decades. She primarily posts on OnlyFans these days, but she previously used Patreon and at one point hosted her own subscription website. No… Read More "OnlyFans Models Are Accidentally Making Hacked Government Websites Disappear"
The US cybersecurity agency CISA on Tuesday warned that vulnerabilities in Adobe ColdFusion, Langflow, and two Joomla extensions have been exploited in the wild. Tracked as CVE-2026-48282 (CVSS score of 10/10), the ColdFusion bug was flagged as exploited only days… Read More "CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws"
The dark web is no longer just a hidden marketplace for stolen credentials; it has grown far beyond that point and now affects nearly every phase of the cyberattack lifecycle. Markets that once traded only compromised accounts now also sell ransomware services,… Read More "Ransomware, AI And Cyber Threats"
