The simultaneous proliferation of outsourcing and increased interconnectedness of modern businesses has caused the third-party risk management (TPRM) landscape to evolve significantly over the last few years. Establishing a robust TPRM program is no longer just about managing risk across… Read More "11 Third-Party Risk Management Best Practices in 2026"
Since April 2024, Sednit’s advanced development team has reemerged with a modern toolkit centered on two paired implants, BeardShell and Covenant, each using a different cloud provider for resilience. This dual‑implant approach enabled long‑term surveillance of Ukrainian military personnel. Interestingly,… Read More "Sednit reloaded: Back in the trenches"
The UK National Cyber Security Centre (NCSC) has unveiled a new technology designed to protect video connections from cyber-attacks. The device, dubbed SilentGlass, was launched on April 22 at CYBERUK, the UK government’s flagship annual cybersecurity conference. SilentGlass is… Read More "NCSC Unveils SilentGlass Device to Protect Monitors from Cyber-Attacks"
According to IBM’s “Securing the C-suite” report, most C-suite executives are confident in their cybersecurity plans. However, the truth is that only 17% exhibit the highest level of security. 60% of CFOs, CHROs, and CMOs feel the least engaged regarding… Read More "Top Cybersecurity Threats for Executives in 2026"
The war in Iran was less than 24 hours old when it produced a historic first: the deliberate targeting of commercial data centers. On March 1st, Iranian drones hit three Amazon Web Services (AWS) facilities in the United Arab Emirates… Read More "What to have on your radar"
A growing range of native macOS features are being repurposed by attackers to execute code, move laterally and evade detection, according to new research examining “living-off-the-land” (LOTL) techniques on Apple systems. The Cisco Talos threat research, published on 21 April, show… Read More "MacOS Native Tools Enable Stealthy Enterprise Attacks"
Cyberattacks are growing in prevalence and sophistication, and so are the damage costs associated with these events. According to IBM’s 2022 Cost of Data Breach Report, the average damage cost of a data breach has reached a record high of… Read More "8 Tips for Lowering Your Cyber Insurance Premium in 2026"
ESET Research has discovered a new variant of the NGate malware family that abuses a legitimate Android application called HandyPay, instead of the previously leveraged NFCGate tool. The threat actors took the app, which is used to relay NFC data,… Read More "New NGate variant hides in a trojanized NFC payment app"
Security researchers have discovered an unusual new threat campaign designed to target victims of notorious cybercrime group TeamPCP. PCPJack is a credential theft framework that “worms across exposed cloud infrastructure and removes artifacts associated with TeamPCP,” according to SentinelOne senior… Read More "PCPJack Campaign Boots TeamPCP Off Compromised Machines"
Organizations of all sizes that store, process, or transmit credit card data must comply with PCI DSS (Payment Card Industry Data Security Standards). The PCI standard’s 12 principal requirements can prove challenging for organizations to achieve and maintain, especially those… Read More "How to Prepare for a PCI DSS 4.0 Audit in 7 Steps in 2026"
