Pwn2Own Ireland 2026 has come to an end, and participants earned more than $1.2 million for exploits targeting phones, printers, smart speakers, smart home hubs, a wellness device, AI infrastructure and coding tools, and cloud databases. The highest rewards were… Read More "Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own"
Data Breach Investigation with Fidelis
A typical investigation may begin with a network, endpoint, or deception signal. The analyst uses that evidence to identify the affected host or identity, examines endpoint activity, reconstructs related network communications, investigates lateral movement, searches historical telemetry for newly discovered… Read More "Data Breach Investigation with Fidelis"
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. “Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two… Read More "P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands"
Lightwell project filters out 400 Java library vulnerabilities
Lightwell, the open-source security initiative set up by IBM and Red Hat, has identified more than 400 previously undiscovered vulnerabilities in widely used Java libraries — and now the companies are inviting customers to submit their own code dependencies to… Read More "Lightwell project filters out 400 Java library vulnerabilities"
Why Executive Families Need Cybersecurity Training Too
An attacker attempts to breach an executive’s personal laptop, but effective multifactor authentication (MFA) blocks them. Actually, it was only a deterrent, because the attacker discovers the executive’s son did not enable MFA on his gaming console, and uses that… Read More "Why Executive Families Need Cybersecurity Training Too"
The calm before the ransomware storm: What you see is not all there is
A breach claims the systems as well as the confidence that was, in retrospect, a major vulnerability 24 Apr 2026 • , 5 min. read There’s a bit of a pattern in the history of organizational failures that repeats too… Read More "The calm before the ransomware storm: What you see is not all there is"
EU Auditors Warn Information-Sharing Gaps Are Hindering Cyber Incident
The EU’s top audit institution has criticized the union for various “shortcomings” that are hindering its detection and response to large-scale cyber incidents. The EU Court of Auditors said in a new report that the bloc’s €1.4bn ($1.6bn) budget for… Read More "EU Auditors Warn Information-Sharing Gaps Are Hindering Cyber Incident"
What is IT Risk Management? Strategies and Processes
IT risk management is the process of managing cybersecurity risks through systems, policies, and technology. This process consists of three primary stages – identification, assessment, and control to mitigate vulnerabilities threatening sensitive resources. Once identification, assessment, and control are in… Read More "What is IT Risk Management? Strategies and Processes"
US Disrupts Chinese State-Sponsored Hacking Tools
The United States on Thursday announced the disruption of two hacking tools used by Chinese state-sponsored threat actors in attacks against US and foreign critical infrastructure. Built by Integrity Technology Group (Integrity Tech), MicroScan has been used for vulnerability scanning,… Read More "US Disrupts Chinese State-Sponsored Hacking Tools"
Risk-Based Vulnerability Prioritization in Cloud Environments
Container environments differ from traditional server environments in an important way: the processes and assets involved are often short-lived, and risk can enter earlier in the pipeline. A vulnerability can arrive already sitting in one of the base images pulled… Read More "Risk-Based Vulnerability Prioritization in Cloud Environments"