Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. BlacksmithAI: Open-source AI-powered penetration testing framework BlacksmithAI is an open-source penetration testing framework that uses multiple AI agents to execute different stages of a security assessment lifecycle. BlacksmithAI runs as…
Category: Cybersecurity
AI, Cybersecurity, Global Security News, malware
Cybersecurity jobs available right now: March 31, 2026
Android Malware Research Director Alice | Israel | On-site – View job details As an Android Malware Research Director, you will establish operational processes, workflows, and quality standards for the team, while integrating the function into existing infrastructure. You will act as the primary client interface, managing relationships, presenting research findings, and ensuring client satisfaction.…
Cybersecurity, Global Security News, privacy
The High Cost of Low Trust: Our Commitment to Radical Transparency
Only 5% of organizations fully trust their cybersecurity providers. Let’s do better. Categories: Products & Services, Sophos Insights Tags: Trust, Trust Center, Privacy
Cybersecurity, Global Security News, privacy
The Cybersecurity Trust Reality in 2026
New Sophos survey reveals only 5% of IT leaders say they fully trust their cybersecurity vendors Categories: Products & Services, Sophos Insights Tags: Trust, Privacy, Trust Center
AI, Apps, Cybersecurity, Endpoint, Europe, Exploits, Global Security News, privacy, Risk Management, Russia
Fortinet hit by another exploited cybersecurity flaw
Yet another critical flaw in a Fortinet product has come to light as attackers continue to target the company, this time by actively exploiting a critical SQL injection vulnerability in the cybersecurity company’s management server. The vulnerability, (CVE-2026-21643), allows unauthenticated threat actors to execute arbitrary code on unpatched systems via specifically-crafted HTTP requests. These low-complexity…
AI, Cybersecurity, Data Breaches, Global Security News, Network Security, Risk Management
Insider Threats Rise with North Korean AI Hiring Fraud Schemes
A suspected North Korean operative attempted to infiltrate a cybersecurity firm using a stolen identity and an AI-generated resume, underscoring how hiring pipelines are becoming an attack vector. The failed attempt reveals how threat actors are blending identity theft, automation, and anonymized infrastructure to bypass traditional recruiting safeguards. “In June 2025, we used a combination…
AI, Cybersecurity, Global Security News, malware
Researchers say credential-stealing campaign used AI to build evasion ‘at every stage’
A new malware-based credential-stealing campaign, which researchers are calling “DeepLoad,” has been infecting enterprise business IT environments over the past In a report released Monday, ReliaQuest AI researchers Thassanai McCabe and Andrew Currie say the most relevant feature of this attack is the way it uses artificial intelligence and other engineering “to defeat the controls…
AI, Cybersecurity, Global Security News
OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability
A previously unknown vulnerability in OpenAI ChatGPT allowed sensitive conversation data to be exfiltrated without user knowledge or consent, according to new findings from Check Point. “A single malicious prompt could turn an otherwise ordinary conversation into a covert exfiltration channel, leaking user messages, uploaded files, and other sensitive content,” the cybersecurity company said in
AI, Cybersecurity, Data Breaches, Global Security News, Risk Management
RSAC 2026: AI Leads Security Shift Across Vendors & MSPs
At this year’s RSA Conference 2026, cybersecurity companies across the board took the opportunity to announce new partnerships and capabilities. Unsurprisingly, AI was a central theme across vendors. Whether focused on AI-powered defense, addressing shadow AI, or embedding AI into security operations, the technology is now more than ever a cornerstone of how cybersecurity companies…
AI, Cybersecurity, Europe, Global Security News
RSAC 2026 is back, and the certificate automation gap is impossible to ignore
RSAC 2026 Conference marked a return to form, more vibrant and better attended than any show I can recall over the past decade. The audience was distinctly international, with strong representation from North America, Europe and Latin America, and it was refreshing to see the energy and overall vibe of the show return to what…
AI, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security
RSAC 2026: Fraud Becomes a CISO-Level Security Threat
At RSAC 2026, I sat down with Rod Schultz, CEO of Bolster AI, and one message came through loud and clear: fraud is no longer a side problem — it’s now a core cybersecurity issue. Over the past five years, the threat landscape has shifted dramatically, and much of that change is being driven by…
AI, Cloud Security, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Risk Management
TeamPCP Supply Chain Campaign: Update 004 – Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, (Mon, Mar 30th)
This is the fourth update to the TeamPCP supply chain campaign threat intelligence report, “When the Security Scanner Became the Weapon” (v3.0, March 25, 2026). Update 003 covered developments through March 28, including the first 48-hour pause in new compromises and the campaign’s shift to monetization. This update consolidates intelligence from March 28-30, 2026 — two days…
AI, Cybersecurity, Global Security News
One Google Login, Five Blockchains, Zero Seed Phrases: Inside Banana Gun’s Approach to Crypto Trading
In the latest development, Banana Gun now facilitates one Google login, five blockchains, zero seed phrases for crypto trading. Ask someone why they have not tried trading on a decentralized exchange and the answer is rarely “I don’t want to.” It is almost always “I don’t know how to set up a wallet.” MetaMask extensions,…
AI, Apps, Cybersecurity, Exploits, Global Security News, privacy, Risk Management
It’s a mystery … alleged unpatched Telegram zero-day allows device takeover, but Telegram denies
A critical Telegram flaw could allow zero-click remote code execution on devices, but Telegram denies it. Researcher Michael DePlante (@izobashi) of TrendAI Zero Day disclosed a new Telegram vulnerability through Zero Day Initiative (ZDI). The vulnerability, tracked as ZDI-CAN-30207 (CVSS score of 9.8) allows attackers to execute code on targeted devices without any user interaction.…
AI, Cybersecurity, Global Security News
IPVanish Threat Protection Pro blocks malicious activity before they reach the user
IPVanish launched Threat Protection Pro, a new feature for Windows and macOS that is designed to provide always-on digital security. Threat Protection Pro is powered by cybersecurity technology from VIPRE, bringing over 25 years of threat intelligence and security expertise into the IPVanish app to deliver advanced, real-time protection against malicious websites, downloads, ads, and…
AI, Apps, Cybersecurity, Exploits, Global Security News, Risk Management
LangChain path traversal bug adds to input validation woes in AI pipelines
Security researchers are warning that applications using AI frameworks without proper safeguards can expose sensitive information in basic, yet critical, non-AI ways. According to a recent Cyera analysis, widely used AI orchestration tools, LangChain and LangGraph, are vulnerable to critical input validation flaws that could allow attackers to access sensitive enterprise data. In a recent…
AI, Apps, Cybersecurity, Data Breaches, Global Security News, Risk Management
CISO Spotlight: Dimitris Georgiou on Building Security that Serves People First
Dimitris Georgiou has been a self-professed computer geek since the early 80s. At university, he studied the convergence of educational technology with computer science as part of his psychology MA – finding, to his disbelief, that systems were perilously insecure. Since then, he’s always worked in and around cybersecurity. He’s had roles as a computer…
AI, Cybersecurity, Exploits, Global Security News, malware, Network Security, Risk Management
Leak reveals Anthropic’s ‘Mythos,’ a powerful AI model aimed at cybersecurity use cases
Anthropic didn’t intend to introduce Mythos this way. Details of what it calls its most capable AI model yet surfaced through a data leak in its content management system (CMS), revealing a LLM with sharply improved reasoning and coding skills. The data leak, which was the result of the company’s staffers inadvertently exposing material about…
AI, Cybersecurity, Exploits, Global Security News, malware, Network Security, Risk Management
Leak reveals Anthropic’s ‘Mythos,’ a powerful AI model aimed at cybersecurity use cases
Anthropic didn’t intend to introduce Mythos this way. Details of what it calls its most capable AI model yet surfaced through a data leak in its content management system (CMS), revealing a LLM with sharply improved reasoning and coding skills. The data leak, which was the result of the company’s staffers inadvertently exposing material about…
AI, Cybersecurity, Global Security News
Dubai Residential Security Installations Double as Prices Fall and Communities Expand
In the latest development, Dubai residential security installations double as prices fall and communities expand. Dubai, UAE. The residential security market in Dubai reached AED 480 million in 2025. The Dubai Security Industry Association projects that figure will climb to AED 620 million by 2027. That trajectory is not driven by fear alone. It is…
AI, Compliance, Cybersecurity, Global Security News, malware
ANY.RUN at RSAC™ 2026: Highlights & Industry Recognition
We’ve just returned from RSAC 2026 in San Francisco, one of the most important cybersecurity events of the year. As always, the conference brought together security leaders, vendors, and practitioners from around the world. For the ANY.RUN team, it was a packed few days of meetings with customers and partners, insightful presentations, and strong industry recognition. ANY.RUN at RSAC…
AI, Compliance, Cybersecurity, Global Security News, malware
ANY.RUN at RSAC™ 2026: Highlights & Industry Recognition
We’ve just returned from RSAC 2026 in San Francisco, one of the most important cybersecurity events of the year. As always, the conference brought together security leaders, vendors, and practitioners from around the world. For the ANY.RUN team, it was a packed few days of meetings with customers and partners, insightful presentations, and strong industry recognition. ANY.RUN at RSAC…
AI, Cybersecurity, Europe, Exploits, Global Security News, malware, Network Security
Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution
Attackers are exploiting a critical Fortinet FortiClient EMS flaw (CVE-2026-21643) that allows remote code execution via SQL injection. A critical Fortinet FortiClient EMS vulnerability, tracked as CVE-2026-21643 (CVSS score of 9.1), is now being actively exploited. Defused researchers warn that threat actors are exploiting the vulnerability in Fortinet’s FortiClient EMS platform. “Fortinet Forticlient EMS CVE-2026-21643…
AI, Apps, Cloud Security, Compliance, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
APIs are the new perimeter: Here’s how CISOs are securing them
Recent breaches suggest attackers are shifting beyond traditional endpoints to target application programming interfaces (APIs). But typical perimeter protections can completely miss this vector. “We used to talk about defense-in-depth and endpoint protection,” says Sean Murphy, CISO at BECU, a nationwide credit union. “That morphed into identity, and now the API is the new perimeter.”…
Cybersecurity, Global Security News, Russia
Russian CTRL Toolkit Delivered via Malicious LNK Files Hijacks RDP via FRP Tunnels
Cybersecurity researchers have discovered a remote access toolkit of Russian-origin that’s distributed via malicious Windows shortcut (LNK) files that are disguised as private key folders. The CTRL toolkit, according to Censys, is custom-built using .NET and includes various executables” to facilitate credential phishing, keylogging, Remote Desktop Protocol (RDP) hijacking, and reverse tunneling
AI, Cybersecurity, Global Security News
The Art of Natural Writing: Turning AI Text into Human-Like Content
In this post, I will talk about the art of natural writing and discuss turning AI text into human-like content. Artificial intelligence has changed the way we create content, making it faster and more efficient than ever. However, one major challenge remains: AI-generated text often lacks the warmth and natural tone of human writing. This…
AI, Cybersecurity, Data Breaches, Global Security News, Government & Policy
Don’t count on government guidance after a smart home breach
People are filling their homes with internet-connected cameras, speakers, locks, and routers. When one of those devices is compromised, the next steps are often unclear. Researchers reviewing government cybersecurity advice in 11 countries found that most guidance focuses on prevention, leaving households with limited support after a breach. The analysis covers Australia, Austria, Canada, Finland,…
AI, Cybersecurity, Exploits, Global Security News, Network Security
Urgent Alert: NetScaler bug CVE-2026-3055 probed by attackers could leak sensitive data
Attackers are actively probing a critical Citrix NetScaler flaw (CVE-2026-3055) that can leak sensitive data via a memory overread issue. A critical vulnerability, tracked as CVE-2026-3055 (CVSS score of 9.3), in Citrix NetScaler ADC and Gateway is already being actively probed by attackers. This week, Citrix issued security updates for two NetScaler vulnerabilities, including the critical memory…
AI, Apps, china, Cybersecurity, Data Breaches, Europe, Exploits, Global Security News, Government & Policy, malware, Network Security, Risk Management, Russia
Security Affairs newsletter Round 569 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. ShinyHunters claims the hack of the European Commission Iran-linked group Handala hacked FBI Director Kash Patel’s…
AI, Cybersecurity, Global Security News, Government & Policy
From Paper to Digital: The Benefits of Making Taxes Digital (MTD)
In this post, I will talk about the benefits of making taxes digital (MTD). A lot of things have expanded from being solely on physical paper to being in digital format. Books are an example. Now, the income tax process in the UK, for certain individuals and businesses. With Making Tax Digital (MTD), the government is…
AI, Cybersecurity, Data Breaches, Europe, Global Security News
ShinyHunters claims the hack of the European Commission
The European Commission has allegedly been breached by ShinyHunters, with reported data dumps including content from mail servers. The European Commission has allegedly been breached by ShinyHunters, with reported data dumps including content from mail servers and internal communications systems. The cybercrime group added the Commission to its Tor data leak site, claiming the theft…
Cybersecurity, Data Breaches, Exploits, Global Security News
Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521)
A critical unauthenticated remote code execution vulnerability (CVE-2025-53521) in F5’s BIG-IP Access Policy Manager (APM) solution is under active exploitation, the US Cybersecurity and Infrastructure Security Agency warned on Friday. CISA added the flaw to its Known Exploited Vulnerabilities catalog after F5 updated the related security advisory, The advisory wasinitially published on October 15, 2025,…
AI, Cybersecurity, Exploits, Global Security News, Network Security, Risk Management
U.S. CISA adds a flaw in F5 BIG-IP AMP to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in F5 BIG-IP AMP to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in F5 BIG-IP AMP, tracked as CVE-2025-53521 (CVSS ver. 3.1 score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability in BIG-IP APM allows…
Cybersecurity, Exploits, Global Security News
CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw impacting F5 BIG-IP Access Policy Manager (APM) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability in question is CVE-2025-53521 (CVSS v4 score: 9.3), which could allow a threat actor to achieve remote code execution.…
AI, Cybersecurity, Exploits, Global Security News, Russia
TA446 Deploys Leaked DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign
Proofpoint has disclosed details of a targeted email campaign in which threat actors with ties to Russia are leveraging the recently disclosed DarkSword exploit kit to target iOS devices. The activity has been attributed with high confidence to the Russian state-sponsored threat group known as TA446, which is also tracked by the broader cybersecurity community…
AI, Apps, Cybersecurity, Exploits, Global Security News, Government & Policy, malware, Network Security, Risk Management
RSAC 2026: No easy fixes for expanding AI attack surface, but a coordinated response is emerging
SAN FRANCISCO — Forty-four thousand cybersecurity practitioners converged on Moscone Center this week with an urgent question: how do you secure a network when everything — the technology, the threats, the tools — is changing faster than anyone can govern it? Related: Feds pull back on collaboration Microsoft’s Vasu Jakkal set the scale on day…
AI, Cybersecurity, Data Breaches, Europe, Global Security News, Network Security
The European Commission confirmed a cyberattack affecting part of its cloud systems
The European Commission confirmed a cyberattack affecting part of its cloud systems, now contained, with no impact on internal networks. On March 24, the European Commission detected a cyberattack affecting the cloud infrastructure hosting its Europa.eu websites. The incident was quickly contained, with mitigation measures applied and no disruption to website availability. Early findings suggest…
AI, Apps, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, Risk Management
LiteLLM Supply Chain Attack Exposes Credentials Across AI Ecosystems
A widely used AI development library was compromised in a recent supply chain attack, potentially exposing a large number of systems to risk. Malicious LiteLLM packages on PyPI were backdoored to quietly steal credentials, tokens, and sensitive infrastructure data from both development and production environments. “The LiteLLM compromise shows just how quickly supply chain attacks…
AI, Apps, Cloud Security, Cybersecurity, Data Breaches, Europe, Global Security News, Risk Management
European Commission data stolen in a cyberattack on the infrastructure hosting its web sites
The European Commission is continuing to investigate the theft of data from its cloud infrastructure earlier this week. On Thursday, the Commission revealed there had been an attack on its Europa.eu platform, offering few details, then, on Friday, security news site Bleeping Computer reported that the attack had involved the compromise of an account or…
AI, Cybersecurity, Global Security News, Network Security, Risk Management
RSAC 2026: Sonar Shares Why Code Security Must Shift Before CI
At RSAC 2026, I sat down with Jeremy Katz, VP of Code Security at Sonar, and one theme came through clearly: the way we secure code has to change — fast. As development shifts toward AI-assisted and agent-driven workflows, traditional checkpoints in CI/CD are no longer enough to catch risk early. Katz pointed out that…
AI, APAC, Apps, Compliance, Cybersecurity, Endpoint, Exploits, Global Security News, Government & Policy, Network Security, Risk Management, Russia
Security leaders say the next two years are going to be ‘insane’
SAN FRANCISCO — Every RSA Conference has its buzzwords. Cloud. Ransomware. Zero trust. Plastered across the 87-acre Moscone Center complex on every booth, banner and bar. This year was AI, with vendors pitching AI-powered solutions to every security problem imaginable. But 2026 stood out for a different reason: Industry leaders spent the conference warning about…
Cybersecurity, Global Security News, malware
China Upgrades the Backdoor It Uses to Spy on Telcos Globally
Chinese APT Red Menshen’s super-advanced BPFdoor malware defeats traditional cybersecurity protections. All telcos can do, really, is try hunting it down.
AI, Cybersecurity, Exploits, Global Security News, Network Security, Risk Management
CISA and BSI warn orgs of critical PTC Windchill and FlexPLM flaw
CISA warns of a critical flaw in PTC Windchill and FlexPLM (CVE-2026-4681), with no patch yet and potential for imminent exploitation. CISA issued an advisory about a critical vulnerability, tracked as CVE-2026-4681 (CVSS score of 10.0), in PTC’s Windchill and FlexPLM software. At this time, no patches are available, and no active attacks have been…
AI, Apps, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, Risk Management, Russia
Critical Vulnerabilities, Insider Threats, and AI-Driven Cybercrime Define the Week
Major Threats & Vulnerabilities Zero-Day and Critical CVE Exploits Oracle’s emergency patch for CVE-2026-21992 addressed a critical remote code execution flaw in Identity Manager and Web Services Manager with a CVSS score of 9.8. The vulnerability could allow unauthenticated attackers to fully compromise systems. Administrators are urged to patch immediately despite no known active exploitation.…
AI, Cybersecurity, Global Security News
Open VSX Bug Let Malicious VS Code Extensions Bypass Pre-Publish Security Checks
Cybersecurity researchers have disclosed details of a now-patched bug impacting Open VSX’s pre-publish scanning pipeline to cause the tool to allow a malicious Microsoft Visual Studio Code (VS Code) extension to pass the vetting process and go live in the registry. “The pipeline had a single boolean return value that meant both ‘no scanners are…
Cybersecurity, Global Security News
Unlocking High-Paying IT Careers with Certification Strategies and Practical Skills
In this post, I will talk about unlocking high-paying IT careers with certification strategies and practical skills. In the modern digital economy, the demand for skilled IT professionals continues to grow at an unprecedented rate. Organizations across the globe are seeking individuals who can manage systems, secure data, and implement innovative technological solutions. One of…
Cybersecurity, Global Security News
Quantum Computing Threat to Encryption Is Closer Than Expected, Warns Google
‘Q-Day’ and the cybersecurity problems it brings could come as early as 2029 as Google accelerates its post-quantum cryptography migration
AI, Apps, Cybersecurity, Endpoint, Exploits, Global Security News
Attackers exploit critical Langflow RCE within hours as CISA sounds alarm
Attackers have exploited a critical Langflow RCE within hours of disclosure, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to formally flag it for urgent remediation. The flaw, which allows running arbitrary code on vulnerable Langflow instances without >credentials, was weaponized within 20 hours of the open-source AI-pipeline tool disclosing it. According to a Sysdig report,…
AI, Compliance, Cybersecurity, Global Security News, Government & Policy, Risk Management
AI regulations are already out of date — IT leaders need to think ahead
Most AI regulations passed in the last few years are already irrelevant, but enterprises should think ahead with rudimentary governance plans for quicker compliance, said legal experts in two panel discussions at Nvidia’s GTC trade show last week. Current AI regulations target frontier models, high-risk models, and transparency. They typically focus on LLMs and the…
AI, Cybersecurity, Exploits, Global Security News, Network Security
CISA sounds alarm on Langflow RCE, Trivy supply chain compromise after rapid exploitation
The US Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-33017, a recently disclosed code injection vulnerability in Langflow, an open-source framework for building AI agents and workflows, and CVE-2026-33634, an embedded malicious code vulnerability in Aqua Security’s Trivy security scanner. Their addition to the catalog…
AI, Cybersecurity, Data Breaches, Exploits, Global Security News, Network Security, Risk Management
U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Aquasecurity Trivy flaw, tracked as CVE-2026-33634 (CVSS score of 9.3), to its Known Exploited Vulnerabilities (KEV) catalog. On March 19, 2026, attackers used compromised credentials to release a malicious…
Cybersecurity, Global Security News
How to Build Cybersecurity Expertise as a Professional
Learn how to build cybersecurity expertise as a professional in this post. The cybersecurity landscape is evolving as digital threats become more sophisticated. Current trends emphasize proactive measures, such as artificial intelligence for threat detection. The rise of remote work has expanded the attack surface, making robust security practices essential. Organizations now view cybersecurity as…
Cybersecurity, Global Security News
How Control Over Your Tech Stack Is Becoming a Competitive Advantage
Learn how control over your tech stack is becoming a competitive advantage in this post. Most digital businesses are built on layers of tools and platforms that handle everything from hosting to customer management. In the early stages, relying on third-party providers makes sense. It speeds up setup, reduces technical overhead, and allows teams to…
AI, Apps, Cybersecurity, Exploits, Global Security News
LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI Frameworks
Cybersecurity researchers have disclosed three security vulnerabilities impacting LangChain and LangGraph that, if successfully exploited, could expose filesystem data, environment secrets, and conversation history. Both LangChain and LangGraph are open-source frameworks that are used to build applications powered by Large Language Models (LLMs). LangGraph is built on the foundations of
AI, Apps, Compliance, Cybersecurity, Europe, Global Security News, privacy, Risk Management
European Parliament delays implementation of parts of the EU AI Act
The European Parliament’s Thursday vote to delay parts of the EU AI Act adds more uncertainty to the already chaotic AI compliance universe. But analysts say that CIOs must proceed as though the compliance rules are in effect. In a statement, Parliament said that its members decided to “delay the application of certain rules on…
AI, Cybersecurity, Global Security News
Top product launches at RSAC 2026
RSAC 2026 showcased a wave of innovation, with vendors unveiling technologies poised to redefine cybersecurity. From AI-powered defense to breakthroughs in identity protection, this year’s conference delivered a glimpse into the future. Here are the most interesting products that caught our attention, and could shape what’s next. Astrix advances AI agent security platform to govern…
AI, Cybersecurity, Exploits, Global Security News, Network Security, Politics
ODNI tackles AI, threat hunting, app cybersecurity in year-one tech review
A year-long effort to strengthen cybersecurity and modernize tech at U.S. intelligence agencies has led to policy standards for using AI to bolster cyber defenses, a shared repository of all apps that have undergone a cybersecurity review and more, the Office of the Director of National Intelligence announced Thursday. An unclassified summary of cyber and…
AI, APAC, Apps, Compliance, Cybersecurity, Global Security News, Risk Management
Preparing for agentic AI: A financial services approach
Deploying agentic AI in financial services requires additional security controls that address AI-specific risks. This post walks you through comprehensive observability and fine-grained access controls—two critical capabilities for maintaining explainability and accountability in AI systems. You will learn seven design principles and get implementation guidance for meeting regulatory requirements while deploying secure AI solutions. Financial…
AI, Cybersecurity, Endpoint, Exploits, Global Security News, Network Security, Risk Management
U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Langflow to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Langflow flaw, tracked as CVE-2026-33017 (CVSS score of 9.3), to its Known Exploited Vulnerabilities (KEV) catalog. Langflow is a popular tool used for building agentic AI workflows. CVE-2026-33017 is a…
AI, Cybersecurity, Exploits, Global Security News
CISA: New Langflow flaw actively exploited to hijack AI workflows
The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical vulnerability identified as CVE-2026-33017, which affects the Langflow framework for building AI agents. […]
AI, Cybersecurity, Data Breaches, Global Security News, privacy, Risk Management
The CISO’s guide to responding to shadow AI
Move over shadow IT; shadow AI is the new risk on the scene. The explosion of available AI tools, leadership’s enthusiasm for the new technology, the push for employees to do more with less, nascent governance and the sheer speed at which AI is evolving has created the perfect environment for shadow AI to flourish.…
AI, Cybersecurity, Exploits, Global Security News, Network Security
FCC pushes new rules to crack down on robocallers, foreign call centers
The Federal Communications Commission is moving to crack down on illegal robocalls and the use of foreign call centers. At a meeting Thursday, the three-member commission unanimously approved a new proposed regulation to increase certification and disclosure requirements for obtaining phone numbers, while also expanding those same requirements to all providers seeking phone numbers from…
AI, Compliance, Cybersecurity, Global Security News
SOC 2 Readiness Assessments: Which Providers Deliver the Best Value?
In this post, I will talk about SOC 2 readiness assessments and also show you which providers deliver the best value? Organizations that handle customer data face increasing pressure to demonstrate strong security controls. SOC 2 compliance, governed by the American Institute of Certified Public Accountants (AICPA), has become a widely recognized benchmark for trust.…
Cybersecurity, Global Security News, Risk Management
The Best ERM Software in 2026
In this post, I will talk about the best ERM software in 2026. Today’s organizations face increasingly complex cybersecurity threats and regulatory landscapes, requiring the right enterprise risk management (ERM) solutions to ensure maximum surveillance. The following five platforms offer a unique approach to risk identification and management, with advanced automation, reporting and integration capabilities…
Cybersecurity, Global Security News, Risk Management
Why cybersecurity certifications are now a business imperative
GUEST OPINION: How validated skills, continual learning, and structured certification paths strengthen security teams and reduce risk.
AI, china, Cybersecurity, Global Security News, Government & Policy, Network Security, privacy
Former NSA chiefs worry American offensive edge in cybersecurity is slipping
SAN FRANCISCO — Four former National Security Agency directors shared varying concerns about a lack of earnest and widespread response to growing threats in cyberspace during a discussion at the RSAC 2026 Conference on Tuesday. Accelerating threats posed by artificial intelligence, China and cybercriminals at large are testing the country’s resolve and determination to foster…
AI, Compliance, Cybersecurity, Global Security News
Databricks pitches Lakewatch as a cheaper SIEM — but is it really?
Databricks has previewed a new open agentic Security Information and Event Management software (SIEM) named Lakewatch that signals its first deliberate step beyond data warehousing into security analytics. The data warehouse-provider is pitching Lakewatch as a lower-cost alternative to traditional security tools, arguing that consolidating security analytics into its data platform can reduce overall spend.…
AI, Cybersecurity, Global Security News
Smashing Security podcast #460: Never knock on the door of a nuclear submarine base and ask for a selfie
A disgruntled data analyst decides that the best response to losing his contract is to steal the entire company payroll database and demand $2.5 million in Bitcoin – signing his extortion emails from a company called “Loot.” Meanwhile, two people drive up to the entrance of the UK’s nuclear submarine base at Faslane and politely…
AI, APAC, Compliance, Cybersecurity, Exploits, Global Security News, Government & Policy, Risk Management
What IT leaders need to know about AI-fueled death fraud
Death is always an unpleasant topic, typically ignored until it is fully upon us. But for IT leaders, fraudsters who use fake death documents generated by AI to steal data and commit a wide range of other crimes are simply too dangerous to ignore. There are two different forms of these death frauds: tricking an…
AI, Apps, Compliance, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, Risk Management
Active Magecart Campaign Targets Spain, Steals Card Data via Hijacked eStores for Bank Fraud
A large-scale magecart operation remained active for over 24 months, leveraging an infrastructure of 100+ domains. While the targeted victims are e-commerce websites, the actual pressure falls on banks and payment systems. As ANY.RUN’s analysis shows, threat actors applied multi-step checkout hijacking, payment page mimicry, and WebSocket-based exfiltration of card data. This report provides both executive-level insights and technical analysis of the campaign. Key Takeaways The campaign demonstrates long-term persistence…
AI, Apps, Compliance, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, Risk Management
Global Magecart Campaign Puts Banks Under Pressure, Leveraging Redsys Payment Mimicry and Hijacking
A large-scale magecart operation remained active for over 24 months, leveraging an infrastructure of 100+ domains. While the targeted victims are e-commerce websites, the actual pressure falls on banks and payment systems. As ANY.RUN’s analysis shows, threat actors applied multi-step checkout hijacking, payment page mimicry, and WebSocket-based exfiltration of card data. This report provides both executive-level insights and technical analysis of the campaign. Key Takeaways The campaign demonstrates long-term persistence…
Cybersecurity, Global Security News
Are VPNs Still a Smart Choice For Everyday Internet Users?
In this post, I will answer the question – are VPNs still a smart choice for everyday Internet users? A VPN still has a place in everyday online life, but it is no longer the all-purpose fix many adverts make it out to be. For years, VPN services have been sold as the answer to…
AI, Cybersecurity, Global Security News, malware
WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites
Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels as a means to receive payloads and exfiltrate data, effectively bypassing security controls. “Instead of the usual HTTP requests or image beacons, this malware uses WebRTC data channels to load its payload and exfiltrate stolen payment data,” Sansec said in a report…
AI, Compliance, Cybersecurity, Data Breaches, Global Security News, Government & Policy, malware, Risk Management
ANY.RUN Recognized for Innovations and Market Leadership at Global InfoSec Awards 2026
ANY.RUN has been recognized at Global InfoSec Awards 2026 by Cyber Defense Magazine (CDM), the industry’s leading electronic information security magazine. The award ceremony took place during RSAC 2026 conference. We’re especially proud and grateful that our impact for the industry has been acknowledged in two categories at once: Innovative Malware Analysis for Sandbox Market Leader Threat Intelligence This dual…
AI, Compliance, Cybersecurity, Data Breaches, Global Security News, Government & Policy, malware, Risk Management
ANY.RUN Recognized for Innovations and Market Leadership at Global InfoSec Awards 2026
ANY.RUN has been recognized at Global InfoSec Awards 2026 by Cyber Defense Magazine (CDM), the industry’s leading electronic information security magazine. We’re especially proud and grateful that our impact for the industry has been acknowledged in two categories at once: Innovative Malware Analysis for Sandbox Market Leader Threat Intelligence This dual recognition reflects the approach to cybersecurity we prioritize: supporting the full SOC…
AI, china, Compliance, Cybersecurity, Global Security News, Network Security, privacy
Never knock on the door of a nuclear submarine base and ask for a selfie
A disgruntled data analyst decides that the best response to losing his contract is to steal the entire company payroll database and demand $2.5 million in Bitcoin – signing his extortion emails from a company called “Loot.” Meanwhile, two people drive up to the entrance of the UK’s nuclear submarine base at Faslane and politely…
Cybersecurity, Global Security News, Government & Policy
At RSAC, the EU Leads While US Officials Are Sidelined
While US government sits out this year, EU officials are on the ground in San Francisco leading the conversations on today’s top cybersecurity challenges.
AI, Apps, Compliance, Cybersecurity, Global Security News, Risk Management
Video: SecurityBridge CEO on SAP Security, AI Risks & 2026 Priorities
In this Channel Insider Partner POV interview, host Katie Bavoso sits down with Jesper Zerlang, CEO of SecurityBridge, to discuss SAP cybersecurity, AI-driven threats like data poisoning, and why channel-first strategies will define partner growth in 2026. Zerlang shares insights on securing mission-critical SAP environments, evolving compliance challenges for CISOs and CIOs, and how partners…
Cybersecurity, Data Breaches, Global Security News
Enterprise Security in 2026: Why Most Organizations Are Still Getting It Wrong
Enterprise security has never been more urgent — or more misunderstood. Despite ballooning security budgets, the average cost of a data breach hit a record high in 2024, and the trend hasn’t reversed. Organizations are spending more on tools than ever before, yet the breaches keep coming. The uncomfortable truth? Spending more isn’t the problem.…
Cybersecurity, Global Security News, Risk Management
US Bans New Foreign-Made Home Routers Over National Security Fears
The FCC has officially added foreign-made consumer routers to its restricted Covered List, citing major cybersecurity risks. Find out what it means for your current devices.
AI, Apps, china, Compliance, Cybersecurity, Europe, Global Security News, Government & Policy, Network Security, Politics, privacy, Risk Management
MY YAKE: A decade of cyber collaboration, built under Obama, is now hostage to a political grudge
SAN FRANCISCO — I was in the room at Stanford in February 2015 when President Obama used the bully pulpit to launch what became a decade of hard-won public-private collaboration in cybersecurity. It didn’t take much to tear it asunder. At RSAC 2026 this week, that decade of work is suddenly on the line —…
Cybersecurity, Global Security News
Hackers Exploit Compromised Enterprise Identities at Industrial Scale, Warns SentinelOne
Cybersecurity company’s annual report issues warning over a “mass-marketed impersonation crisis” over attackers abusing legitimate credentials
AI, Cybersecurity, Endpoint, Exploits, Global Security News, Network Security, Risk Management
Patch now: TP-Link Archer NX routers vulnerable to firmware takeover
TP-Link patched a high severity flaw (CVE-2025-15517) in Archer NX routers that could let attackers bypass authentication and install malicious firmware. TP-Link issued security updates for its Archer NX router series to fix multiple vulnerabilities, including CVE-2025-15517 (CVSS score of 8.6), a critical authentication bypass flaw. The vulnerability impacts multiple models, including NX200, NX210, NX500,…
AI, Cybersecurity, Global Security News
GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data
Cybersecurity researchers have flagged a new evolution of the GlassWorm campaign that delivers a multi-stage framework capable of comprehensive data theft and installing a remote access trojan (RAT), which deploys an information-stealing Google Chrome extension masquerading as an offline version of Google Docs. “It logs keystrokes, dumps cookies and session tokens, captures screenshots, and
AI, Cybersecurity, Data Security, Endpoint, Exploits, Global Security News, Risk Management
Dell Addresses Emerging Quantum Risks, AI Era Resilience
Dell Technologies is taking a step in expanding cybersecurity and resilience for the AI era and emerging quantum threats by introducing new security capabilities to help organizations secure, detect, and recover from next-gen threats. Quantum computing and AI continue to introduce new security threats These latest enhancements address risks from quantum computing and AI by…
AI, Cybersecurity, Data Breaches, Global Security News, privacy
Recent Navia data breach impacts HackerOne employee data
A Navia breach exposed personal data of nearly 300 HackerOne employees after attackers compromised the benefits provider. HackerOne revealed that a data breach at Navia Benefit Solutions exposed the personal information of nearly 300 of its employees. The incident stems from an attack on the third-party benefits provider, highlighting how breaches at external partners can…
AI, Cybersecurity, Global Security News, Network Security
Barracuda Advances Cybersecurity Platform and Partner Program
Accelerates Innovation to Strengthen Cyber Resilience and Fuel Partner Growth News highlights: Barracuda unveils BarracudaONE cybersecurity platform innovations and modernised global partner program. New BarracudaONE innovations strengthen cyber resilience across email, network access and generative AI usage. The enhanced partner program introduces new benefits, incentives and tools to help MSPs, resellers and hybrid partners accelerate…
AI, Cloud Security, Cybersecurity, Data Breaches, Exploits, Global Security News, malware, Network Security
Trivy supply chain breach compromises over 1,000 SaaS environments, Lapsus$ joins the extortion wave
What started as a supply chain attack on Trivy, a widely used security scanner, has become a Lapsus$-linked extortion campaign, with more than 1,000 enterprise SaaS environments already compromised. Charles Carmakal, CTO of Mandiant Consulting, made the assessment at a Google-hosted threat briefing held alongside the RSA Conference 2026 in San Francisco on Tuesday. “We…
AI, Cybersecurity, Global Security News
Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse
Cybersecurity researchers are calling attention to an active device code phishing campaign that’s targeting Microsoft 365 identities across more than 340 organizations in the U.S., Canada, Australia, New Zealand, and Germany. The activity, per Huntress, was first spotted on February 19, 2026, with subsequent cases appearing at an accelerated pace since then. Notably, the campaign…
AI, APAC, Apps, Compliance, Cybersecurity, Endpoint, Global Security News, Network Security, privacy, Risk Management
Telemetry Pipeline: How It Works and Why It Matters in 2026
A telemetry pipeline has become a core layer in modern security operations because teams no longer send data from applications, infrastructure, and cloud services straight into a single backend and hope for the best. In 2026, most environments are distributed across cloud, hybrid, and on-prem systems, which means more services, more data sources, more formats,…
AI, Cybersecurity, Exploits, Global Security News, Network Security, Risk Management
FCC targets foreign router imports amid rising cybersecurity concerns
The FCC will ban new foreign-made routers in the U.S. over security risks, unless approved by DHS or defense authorities. The U.S. FCC announced a ban on importing new foreign-made consumer routers, citing unacceptable cyber and national security risks. The decision, backed by Executive Branch assessments, means such devices can no longer be sold or…
AI, Apps, Compliance, Cybersecurity, Europe, Global Security News, Government & Policy, malware, Network Security, Risk Management
Kamasers Analysis: A Multi-Vector DDoS Botnet Targeting Organizations Worldwide
DDoS attacks are no longer only an infrastructure problem. They can quickly turn into a business issue, affecting uptime, customer experience, and operational stability. Kamasers is a strong example of this new reality, with broad attack capabilities and resilient command-and-control mechanisms that allow it to remain active under pressure. Let’s explore the Kamasers botnet through…
AI, Apps, Compliance, Cybersecurity, Europe, Global Security News, Government & Policy, malware, Network Security, Risk Management
Kamasers Analysis: A Multi-Vector DDoS Botnet Targeting Organizations Worldwide
DDoS attacks are no longer only an infrastructure problem. They can quickly turn into a business issue, affecting uptime, customer experience, and operational stability. Kamasers is a strong example of this new reality, with broad attack capabilities and resilient command-and-control mechanisms that allow it to remain active under pressure. Let’s explore the Kamasers botnet through…
AI, Compliance, Cybersecurity, Europe, Global Security News, Government & Policy, Network Security, Risk Management
6 key trends reshaping the IAM market
The identity and access management (IAM) market has shifted its focus from traditional “login and MFA” mechanisms toward treating identity as a security control plane. Buyers are prioritizing phishing-resistant authentication, including passkeys, and the management of non-human identities, according to an array of experts quizzed on developments in the market by CSO. “Workforce access is…
AI, Cybersecurity, Global Security News, Network Security, Risk Management
Barracuda strengthens cyber resilience with BarracudaONE platform updates
Barracuda Networks has announced advancements to the BarracudaONE cybersecurity platform and Barracuda Partner Success Program. The latest innovations strengthen cyber resilience across email, network access and generative AI usage, while the enhanced partner program delivers new benefits, incentives and tools that help partners accelerate growth and profitability. “Email and identity‑based attacks are intensifying at an…
AI, china, Cybersecurity, Exploits, Global Security News, Government & Policy, Risk Management, Russia
DarkSword’s GitHub leak threatens to turn elite iPhone hacking into a tool for the masses
Leaked iOS spyware has some cybersecurity professionals raising urgent alarms about potential mass iPhone compromises, a development that pairs ominously with the recent discovery of two sophisticated iOS exploit kits. At the same time, some other experts say Apple’s defensive features for iPhones remain elite. But several factors have created unprecedented circumstances: the public accessibility…
AI, APAC, Apps, Cybersecurity, Data Breaches, Exploits, Global Security News, malware, Network Security, Risk Management
Why Prevention Isn’t Enough: Shifting to True Operational Resilience in 2026
As cyber threats grow in sophistication and scale, traditional prevention-first security models are proving insufficient for modern enterprises. This article examines the evolution toward operational resilience, emphasizing the protection of identity systems, rapid containment, and recovery as essential capabilities. It explores how organizations can adopt an “assume breach” mindset, strengthen identity infrastructure, and build recovery-focused…
Cybersecurity, Global Security News
RSA Conference: UK NCSC Head Urges Industry to Develop Vibe Coding Safeguards
The head of the UK’s NCSC is calling the cybersecurity industry to “seize the disruptive vibe coding opportunity” to make software more secure
AI, Cybersecurity, Global Security News, Risk Management
The Role of Risk Management in Funded Trading: Lessons from Top Performers
In this post, I will talk about the role of risk management in funded trading as I show you lessons from top performers. Every funded trader who has maintained a profitable account for more than a few months will tell you the same thing: the strategy that makes you money is far less important than…
AI, Apps, china, Compliance, Cybersecurity, Data Breaches, Exploits, Global Security News, Government & Policy, Network Security, Risk Management, Russia
Critics call FCC router rule a ‘big swing’ that could create more supply chain uncertainty
The Federal Communications Commission’s move to ban foreign-made routers touches on a real threat, but critics say the agency rule is overly broad, practically unworkable and doesn’t meaningfully address weaknesses in router security that have led to major breaches on American governments and businesses. Under the Secure Equipment Act and Secure Networks Act, the FCC…