The UK government has claimed over 60 businesses have signed up to a new initiative designed to improve the cyber resilience of British organizations. The Cyber Resilience Pledge was first trailed at the government’s CYBERUK conference in Glasgow in April,… Read More "Government Launches Cyber Resilience Pledge, Claiming 60+ Signatories"
As concluded in the 2026 Verizon Data Breach Investigations Report. Vulnerability exploitation has overtaken credential abuse as the #1 initial access vector — 31%, up 55% year-over-year, versus 13% for credentials. That shift highlights an operational problem for every security… Read More "Top 10 Attack Surface Management Software Solutions in 2026"
A newly disclosed Linux kernel vulnerability can be exploited to escape virtual machines (VMs) and execute code on the underlying host, security researchers warn. Tracked as CVE-2026-53359 and referred to as Januscape, the security defect impacts the shadow MMU code… Read More "Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems"
A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws… Read More "Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities"
At some point, every security leader gets asked a version of the same question: Are we good? It tends to arrive when something is at stake and the person asking needs to know they can rely on the answer. I… Read More "The modern CISO is becoming the next CFO"
Adobe has urged ColdFusion customers to patch their instances immediately after at least one maximum severity flaw was reported as being exploited by attackers. The software giant released patches for 11 CVEs on June 30 in the APSB26-68 bulletin. Six… Read More "Hackers Exploit Maximum Severity Adobe ColdFusion Flaw"
Ransomware is the fasted-growing category of cybercrime. It’s estimated that over 4,000 ransomware attacks occur daily. Given the sheer volume of these attacks and the deep attack surface connections between organizations and their vendors, there’s a high likelihood that some… Read More "The Ultimate Ransomware Defense Guide (2026)"
Ravie LakshmananJul 07, 2026 Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices’ web management interfaces, the CERT Coordination Center (CERT/CC) warned… Read More "CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware"
Security leaders must urgently accelerate transition plans to post-quantum cryptography (PQC) through more proactive inventorying, procurement and crypto-agility efforts, a leading security expert has argued. Speaking at Infosecurity Europe on June 3, Forescout VP of security intelligence, Rik Ferguson, warned… Read More "Infosecurity Europe: Raise Security Concerns with Procurement Now, Bec"
A request for proposal (RFP) response is a vendor’s formal reply to a procurement document where a prospective buyer outlines all the information they need to make a final purchasing decision. It acts as a detailed pitch, typically covering pricing,… Read More "What Is an RFP Response? A Guide for Security and GRC Teams"
