CISA has set out a framework for improving the quality of CVE data, arguing that the vulnerability identification program must mature as disclosure volumes climb and AI tools speed up discovery. The CVE Program: Establishing a Quality Era Framework document, published… Read More "CISA Charts New “Quality Era” for Global CVE Program"
The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition
The Hacker NewsOct 09, 2026Identity Security / Artificial Intelligence As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The “Horizons of Identity Security”… Read More "The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition"
Emerging Ransomware Gang Uses Backup Destruction Threats
A newly formed ransomware group has claimed that if its victims don’t give into their extortion demands and pay a ransom, that they will destroy their backup infrastructure, in a move which could prevent a targeted organization from operating entirely.… Read More "Emerging Ransomware Gang Uses Backup Destruction Threats"
Best Cyber Risk Posture Management (CRPM) Platforms
The modern security landscape is an unfair fight. The perimeter is gone—replaced by a borderless terrain where a team of one to 10 is expected to defend the same footprint as a 50-person security operations center (SOC). Attack surface. Vendor… Read More "Best Cyber Risk Posture Management (CRPM) Platforms"
Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
Ravie LakshmananOct 09, 2026Vulnerability / Cryptojacking Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are… Read More "Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge"
North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters
North Korea’s Lazarus umbrella operates as six distinct cyber clusters, according to a new analysis of the country’s offensive cyber capabilities. Sekoia and Kudelski Security said the organization reflected a broader effort by North Korea to distribute cyber operations across… Read More "North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters"
26 Biggest Data Breaches in Finance (Updated July 2026)
These are the 26 largest and most consequential data breaches in financial services, current as of July 2026. They span banks, credit bureaus, payment processors, mortgage servicers, insurers, and the technology vendors that sit behind them, and many of the… Read More "26 Biggest Data Breaches in Finance (Updated July 2026)"
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
Ravie LakshmananOct 09, 2026Vulnerability / Artificial Intelligence Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). “It’s an opt-in service informed by our experience using Claude to find… Read More "Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects"
Ransomware’s back office: What the ransom note won’t say
In March 2024, an affiliate of the BlackCat ransomware gang took to a cybercrime forum with a complaint. They’d carried out the attack on Change Healthcare – one of the largest healthcare data breaches in U.S. history – but never… Read More "Ransomware’s back office: What the ransom note won’t say"
Rhysida Publishes Berlin Government Data After €2m Extortion Demand Re
Berlin’s state government has confirmed that the Rhysida ransomware gang has published a stolen dataset on the dark web, after it refused to pay the threat actor’s extortion demand. The State of Berlin said Rhysida had demanded 30 bitcoins, equivalent… Read More "Rhysida Publishes Berlin Government Data After €2m Extortion Demand Re"