Ravie LakshmananSep 21, 2026Malware / Social Engineering The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based “much smaller organization” in the information technology (IT) services industry, once again highlighting how the… Read More "Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors"
A cybersecurity Incident Response Plan (CSIRP) is the guiding light that grounds you during the emotional hurricane that follows a cyberattack. A CSIRP helps security teams minimize the impact of active cyber threats and outline mitigation strategies to prevent the… Read More "How to Create an Incident Response Plan (Detailed Guide)"
Cybersecurity firm TigerByte Cyber has emerged from stealth mode with $3 million raised in a seed funding round led by Hale Capital Partners, with additional support from Tenon VC. Hanover, NH-based TigerByte Cyber provides cyber hardening for AI and edge… Read More "TigerByte Cyber Emerges From Stealth With $3 Million in Funding"
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in breach research, including Verizon’s annual Data Breach Investigations Report. This article explains what identity visibility… Read More "Identity Visibility in 2026: The Foundation of Identity Security"
Ravie LakshmananSep 19, 2026Vulnerability / Identity Security SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326,… Read More "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE"
Three researchers at the security firm Hacktron used Anthropic’s Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository. The chain began with a… Read More "Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws"
Welcome to the inaugural edition of Kernel Panic! A weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To receive this newsletter in your inbox each week, sign up here.… Read More "Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening"
ESET Research Threat Reports A view of the H1 2026 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts. 08 Jul 2026 • , 2 min. read The first half of… Read More "ESET Threat Report H1 2026"
ESET researchers identified 11 old and forgotten UEFI shim bootloaders at versions 0.9 and below that can be used to bypass UEFI Secure Boot on any UEFI-based machine that trusts Microsoft’s Microsoft Corporation UEFI CA 2011 third-party UEFI certificate authority… Read More "Forgotten UEFI shims undermining Secure Boot"
Top VPNs Compared Other VPNs We’ve Tested Surfshark: I’ve used Surfshark personally for a few years, and I’d still be using it if Proton didn’t impress me so much. Surfshark is dead simple to use. It pops up and connects… Read More "6 Best VPN Services (2026), Tested and Reviewed"
