Palo Alto Networks’ security division, Unit 42, is warning of yet another campaign targeting Microsoft Teams users. The new campaign begins with Teams users receiving an email asking if they would like to participate in a survey. If they open… Read More "Watch out for fake support calls in Microsoft Teams"
One of the most active ransomware gangs of 2026 has been handing its affiliates a ready-made toolkit for switching off victims’ security software before the encryption begins. New analysis from ESET detailed the endpoint detection and response (EDR) killer suite… Read More "GentleKiller Framework Disables Victims’ Security Software"
Vendor Risk Management encompasses a wide range of cybersecurity risk factors. As such, a VRM report design could range from highly detailed to concise, depending on the specific reporting requirements of stakeholders and the board. This list represents the most… Read More "A Guide to Vendor Risk Management Reporting in 2026"
Ravie LakshmananJul 07, 2026AI Security / Vulnerability Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial intelligence (AI) platform, that could result in cross-tenant compromise. The one-click vulnerability has been codenamed… Read More "Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants"
A critical vulnerability in the Kernel-based Virtual Machine (KVM) module of the Linux kernel allows attackers with root access in a guest VM to execute arbitrary code on the host system. This violates the most important security boundary that cloud… Read More "16-year-old KVM flaw allows attackers to escape VMs and take over Linux servers"
Access to Anthropic’s most capable AI model has been extended to an additional 150 organizations, widening a program that uses frontier AI to find vulnerabilities in the world’s most critical software. Anthropic announced the expansion of Project Glasswing on June… Read More "Anthropic Expands Mythos Access to 150 More Organizations"
Supplier risk is a top contributor to data breaches. On average, a single data breach costs companies $4.9 million, according to the 2024 Cost of a Data Breach Report by IBM. To counteract this growing threat, many organizations are investing… Read More "Best Vendor Risk Management Software for 2026"
Keyfactor, which helps organizations connect humans, machines, and AI with cryptographic security, has secured a strategic growth investment exceeding $1 billion. The massive capital injection comes as enterprises are grappling with what is sometimes described as “identity sprawl“, where machine… Read More "Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security"
A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization’s private repositories, researchers at Noma Security have shown. The attacker needs only to open a normal-looking issue on a public repository, with no stolen credentials… Read More "Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data"
One of the best ways to advise boards on cybersecurity risks is is to focus on money and how a smart approach to cyber risk management can be a strong long term investment for the organization, according to a panel of… Read More "How to Get Boards to Prioritize Cyber Risk Quantification"
