Under such conditions, expecting flawless human performance is unrealistic. Employees manage high volumes of communication while also combating deadlines and performance expectations. Senior leaders frequently make decisions with incomplete information, balancing urgency against risk to keep the business running. When… Read More "Security awareness is not a control: Rethinking human risk in enterprise security"
The mobile marketplace app has a growing number of users, but not all of them are genuine. Watch out for these common scams. 04 Feb 2026 • , 6 min. read OfferUp has been in business for nearly 15 years.… Read More "Here’s what you should know"
The impact of cyber-attacks on UK manufacturers extended well beyond Jaguar Land Rover (JLR) last year, with 78% of businesses suffering a serious incident, according to new data from ESET. The security vendor polled 500 senior decision-makers responsible for IT, OT,… Read More "Eight in 10 UK Manufacturers Hit by Cyber Incident in a Year"
Malicious versions of the highly popular Axios NPM library were distributed to millions in a fresh supply chain attack blamed on North Korean hackers. A promise-based HTTP client that supports asynchronous API requests from Node.js and browsers, Axios is used… Read More "Axios NPM Package Breached in North Korean Supply Chain Attack"
Ravie LakshmananApr 01, 2026Threat Intelligence / Software Security Google has formally attributed the supply chain compromise of the popular Axios npm package to a financially motivated North Korean threat activity cluster tracked as UNC1069. “We have attributed the attack to… Read More "Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069"
IT leaders are setting their operations strategies for 2026 with an eye toward agility, flexibility, and tangible business results. Download the January 2026 issue of the Enterprise Spotlight from the editors of CIO, Computerworld, CSO, InfoWorld, and Network World and… Read More "Enterprise Spotlight: Setting the 2026 IT Agenda"
Can you believe your ears? Increasingly, the answer is no. Here’s what’s at stake for your business, and how to beat the deepfakers. 23 Feb 2026 • , 4 min. read There was a time when we could believe everything… Read More "How to tell if a voice call is AI or not"
A set of newly identified vulnerabilities in the Linux security module AppArmor could allow attackers to gain root access, bypass system protections and trigger service outages across millions of systems. The issues, collectively named ‘CrackArmor,’ were discovered by the Qualys… Read More "CrackArmor Flaws Expose Linux Systems to Privilege Escalation"
Palo Alto Networks has shared details about how its researchers weaponized AI agents built on Google Cloud’s Vertex AI development platform. The research focused on the Vertex Agent Engine and the Agent Development Kit (ADK), which enable developers to create,… Read More "Google Addresses Vertex Security Issues After Researchers Weaponize AI Agents"
Ravie LakshmananApr 01, 2026Data Breach / Artificial Intelligence Anthropic on Tuesday confirmed that internal code for its popular artificial intelligence (AI) coding assistant, Claude Code, had been inadvertently released due to a human error. “No sensitive customer data or credentials… Read More "Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms"
