Infosecurity Europe has unveiled a major line-up of keynote speakers for its 2026 conference program, bringing together prominent figures from the military, global cybersecurity, elite sport and intelligence communities. The event will run from 2–4 June at ExCeL London. Industry… Read More "Infosecurity Europe Announces 2026 Keynote Line Up"
“You knew, and you could have acted. Why didn’t you?” This is the question you do not want to be asked. And increasingly, it’s the question leaders are forced to answer after an incident. For years, many executive teams and… Read More "What Boards Must Demand in the Age of AI-Automated Exploitation"
CVE-2026-23814, scored 8.8, requires only low-level authenticated access. A remote attacker with minimal privileges could inject malicious commands through parameters in a CLI command, resulting in unwanted behavior, the advisory said. Italy’s National Cybersecurity Agency discovered and reported the flaw.… Read More "Critical flaw in HPE Aruba CX switches lets attackers seize admin control without credentials"
The French Cybersecurity Agency (ANSSI) has confirmed the decline of known ransomware attacks in 2025, in part due to successful law enforcement operations. The latest edition of the agency’s annual threat report, published on March 11, dives into the range… Read More "France’s Cybersecurity Agency Reports Ransomware Attack Drop in 2025"
Ravie LakshmananMar 11, 2026 Vulnerability / Application Security Cybersecurity researchers have disclosed details of two now-patched security flaws in the n8n workflow automation platform, including two critical bugs that could result in arbitrary command execution. The vulnerabilities are listed below… Read More "Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials"
On the James River, Petersburg, VA, June of 1864, during the American Civil War, General Benjamin Butler, of the US Army, deployed a new weapon into the field that effectively altered the nature of kinetic battles. The later named “Siege… Read More "Did cybersecurity recently have its Gatling gun moment?"
A widespread cyber-criminal campaign has compromised legitimate WordPress websites to infect visitors with infostealer malware, threat researchers at Rapid 7 have warned. The global operation has compromised over 250 websites including regional news publications, local business websites and a US… Read More "Compromised WordPress Sites Deliver ClickFix Attacks"
Ravie LakshmananMar 11, 2026Vulnerability / Enterprise Security SAP has released security updates to address two critical security flaws that could be exploited to achieve arbitrary code execution on affected systems. The vulnerabilities in question listed below – CVE-2019-17571 (CVSS score:… Read More "Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices"
First, visibility is incomplete by design. Devices are frequently deployed by facilities teams, engineering groups, or third-party integrators rather than security organizations. Asset inventories lag reality. Telemetry is sparse, proprietary, or intermittent. Many devices communicate only during specific operational states,… Read More "Why zero trust breaks down in IoT and OT environments"
Security and safety guardrails in generative AI tools, deployed to prevent malicious uses like prompt injection attacks, can themselves be hacked through a type of prompt injection. Researchers at Unit 42, Palo Alto Networks’ research lab, have found that large… Read More "Researchers Discover Major Security Gaps in LLM Guardrails"
