The UK’s National Cyber Security Centre (NCSC) has released guidance for Fortinet customers impacted by a global credential theft campaign. A database of around 75,000 credentials stolen from FortiGate firewall and SSL VPN customers was discovered by security researchers last… Read More "NCSC Urges Fortinet Customers to Tackle FortiBleed Fallout"
In today’s interconnected business world, managing vendor risk is not just a necessity—it’s imperative. With enterprises increasingly relying on outsourcing to a network of vendors, suppliers, and third-party service providers, the potential for risks that can disrupt operations, impact compliance,… Read More "Enterprise Vendor Risk Management: 2026 Guide"
The UK’s information commissioner, John Edwards, has resigned following an HR investigation into complaints made about him in the workplace. The Information Commissioner’s Office (ICO) confirmed the departure of New Zealand-born Edwards on June 19. It revealed that the investigation… Read More "Information Commissioner Resigns After Workplace Investigation"
CISOs and security analysts understand that the narrative surrounding artificial intelligence risk has changed. The old assumption that AI risk begins and ends with an employee copying and pasting a sensitive paragraph into a public ChatGPT prompt has dissipated, and… Read More "The Architecture of an AI-Powered Breach: The Shadow Supply Chain"
Several companies have disclosed that they were affected by a breach of business intelligence provider Klue, including a number of cybersecurity firms. Huntress, Recorded Future, Jamf and Tanium have all acknowledged using Klue’s intelligence services and confirmed that the breach enabled… Read More "Klue Breach Enables Hackers to Compromise Cybersecurity Firms"
Microsoft’s approach of generative artificial intelligence has fundamentally redefined corporate productivity. The “Copilot” brand has become synonymous with workplace efficiency, promising to accelerate everything from writing software to summarizing executive board meetings. For a security analyst, however, this widespread integration… Read More "Decoding the Copilot Ecosystem | UpGuard"
A supply chain attack which targeted Mastra, an open-source typescript for building AI-powered applications and agents, was the work of North Korean hackers, cybersecurity researchers have said. The attribution was made on June 19 by Microsoft Defender Security Research Team… Read More "Microsoft Attributes Mastra AI Supply Chain Attack to North Korea"
As a security analyst, your intake queue has likely been overtaken by requests to approve Claude. While that used to be a straightforward decision, Anthropic’s rapid deployment of agentic utilities, such as Claude Co-Work and Claude Code, has created a… Read More "Governing Excessive Agency in the Anthropic Ecosystem"
A novel iPhone BootROM vulnerability has been discovered by researchers that gives attackers with physical access a route to compromise the boot chain on Apple A12, S4/S5 and Apple A13 systems-on-chips (SoCs). Paradigm Shift’s new analysis shared how the bug, which… Read More "Unpatchable BootROM Flaw Impacts Apple A12, A13 Chips"
The writing is on the wall: artificial intelligence has moved past the experimental phase and has cemented its place as a core component of the modern enterprise stack. For CISOs, the playbook of flat firewall blocking is ineffective—bans don’t halt… Read More "The 2026 Enterprise AI Security Index"
