Supply chain attacks have rapidly become one of the most damaging and difficult threats facing IT and security teams. When an adversary compromises a trusted vendor, software component, cloud service, or MSP tool, they bypass traditional defenses and enter through… Read More "5 steps to strengthen supply chain security and improve cyber resilience"
A months-long supply chain attack that affected the Notepad++ update process has been linked to a compromise of shared hosting infrastructure rather than a flaw in the software’s code. This according to an ongoing investigation involving external security experts and the… Read More "Notepad++ Update Hijacking Linked to Hosting Provider Compromise"
A vulnerability in how Grafana’s AI components process information could allow attackers to bypass the application’s safeguards and leak enterprise information, new research from Noma Security shows. An open source analytics and visualization application that ingests data from various sources,… Read More "GrafanaGhost: Attackers Can Abuse Grafana to Leak Enterprise Data"
The new vulnerability is an authentication bypass issue that stems from improper access control in the FortiClient EMS API. It allows attackers to execute code on the underlying server without valid credentials or user interaction. “The two vulnerabilities have not… Read More "Fortinet releases emergency hotfix for FortiClient EMS zero-day flaw"
A new set of Zero Trust Implementation Guidelines (ZIGs) detailing how organizations can progress to target-level zero trust maturity has been released by the US National Security Agency (NSA). The guidance introduces Phase One and Phase Two of the ZIGs,… Read More "NSA Publishes New Zero Trust Implementation Guidelines"
As US President Donald Trump threatens wholesale demolition of Iran’s infrastructure in the midst of an escalating war, Iran now appears to have already reciprocated with its own form of infrastructure sabotage: A hacking campaign hitting industrial control systems across… Read More "Iran-Linked Hackers Are Sabotaging US Energy and Water Infrastructure"
UK cybersecurity startup Trent AI today announced emerging from stealth mode with $13 million in seed funding. The investment round was led by LocalGlobe and Cambridge Innovation Capital, with additional support from several angel investors. Founded in 2025 by former… Read More "Trent AI Emerges From Stealth With $13 Million in Funding"
Every asset you manage expands your attack surface. Internet‑facing applications, cloud workloads, credentials, endpoints, and third‑party integrations all represent potential entry points for attackers. As environments grow more distributed, that exposure expands faster than most security teams can track manually.… Read More "5 practical steps to strengthen attack resilience with attack surface management"
The largest mobile phone operator in the Netherlands has revealed a major data breach affecting millions of customers. Odido said in a statement late last week that the incident affected a “customer contact system.” Although the firm pointed out that… Read More "Odido Breach Impacts Millions of Dutch Telco Users"
Following leaked revelations at the end of March that Anthropic had developed a powerful new Claude model, the company formally announced Mythos Preview on Tuesday along with news of an industry consortium it has convened, known as Project Glasswing, to… Read More "Anthropic Teams Up With Its Rivals to Keep AI From Hacking Everything"
