Cybercriminals go after people’s personal information across every kind of online platform, including WhatsApp, Instagram, LinkedIn, Roblox, YouTube and Spotify, not to mention finance apps. No online account is off the table. If one of your own accounts falls victim,… Read More "A quick guide to recovering a hacked account"
A new set of compromised Docker images linked to the Trivy supply chain attack has been identified, expanding the impact of the incident across developer environments and CI/CD pipelines. On March 19, 2026, threat actors compromised Aqua Security’s Trivy vulnerability… Read More "Trivy Supply Chain Attack Expands With New Compromised Docker Images"
Several critical infrastructure organizations in the U.S. were disrupted by Iran-linked cyberattacks that impacted operational technology (OT) devices, according to an urgent warning from federal agencies on Tuesday. In a joint advisory, the FBI, CISA, NSA, EPA, DOE, and United… Read More "Iran-Linked Hackers Disrupt US Critical Infrastructure via PLC Attacks"
Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy. 07 Apr 2026 • , 4 min. read We stand at an interesting point in the never-ending arms race… Read More "As breakout time accelerates, prevention-first cybersecurity takes center stage"
The high-tech sector was the most targeted industry for cyber-attacks in 2025, dethroning financial services as the primary focus of threat actors, according to Mandiant’s latest incident response data. High tech companies accounted for 17% of all Mandiant investigations in… Read More "High-Tech Sector Overtakes Finance as Top Target for Cyber-Attacks"
Identity compromise has become one of the most effective ways for attackers to infiltrate business systems. Firewalls, endpoint protection, and monitoring tools mean little once an attacker logs in using valid credentials. For MSPs and corporate IT teams, strengthening identity… Read More "5 ways to strengthen identity security and improve attack resilience"
Despite a major law enforcement operation earlier this month, Tycoon2FA, a subscription-based phishing-as-a-service (PhaaS) platform, has continued to compromise email accounts and bypass multifactor authentication (MFA). The platform, which intercepts live authentication sessions using adversary-in-the-middle (AITM) techniques, has reportedly resumed… Read More "Tycoon2FA Phishing Service Resumes Activity Post-Takedown"
AI giant Anthropic has unveiled Project Glasswing, a cybersecurity initiative built around Claude Mythos Preview, a model it describes as “cybersecurity in the age of AI” that can autonomously identify software vulnerabilities at scale. Rather than release the model publicly,… Read More "What Anthropic Glasswing reveals about the future of vulnerability discovery"
Over half (56%) of IT and cybersecurity professionals have no idea how quickly they could shut down AI systems affected by a cyber-attack or security incident, new research by ISACA has found. Published on 23 March by the global certification… Read More "Cybersecurity Staff Don’t Know How Fast They Could Stop AI Attacks"
The Medusa ransomware group has been operating at a fast pace, seizing short windows of opportunity in attacks across multiple verticals, Microsoft says. Operating as a ransomware-as-a-service (RaaS), Medusa has been active since June 2021 and hit over 300 organizations… Read More "Medusa Ransomware Fast to Exploit Vulnerabilities, Breached Systems"
