The MSP merger and acquisition market continues to attract private equity and strategic buyers, but service providers hoping to capitalize on that demand must prepare their businesses—and themselves—well before entering a transaction. MSP valuations remain at six to eight times EBITDA Speaking at GTIA ChannelCon 2026, Craig Fulton, M&A advisor at Evergreen, said buyer interest…
NVIDIA is bringing some of Wall Street’s biggest firms into the race to finance AI data centers and compute. The chipmaker has teamed up with BlackRock, Goldman Sachs and other financial heavyweights on a plan that could mobilize more than $500 billion for AI compute over time. The company has signed memorandums of understanding with…
Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named “ShieldBreak” after Microsoft released the August 2026 Patch Tuesday security updates. […]
As enterprises accelerate AI adoption, fragmented tools, inconsistent governance, and disconnected workflows are creating new operational challenges—and expanding the role of channel partners. Sandro Guedes, global director of partnerships at Pipefy, said partners are increasingly being called on not just to sell AI technologies, but to help customers integrate them, establish governance, and drive adoption…
Security work used to leave a trail without anyone trying. A developer who wanted an open source library went and got it, and the license came along. An analyst who closed a case wrote down why. The record was a byproduct of a person doing the work. Related: Part 2 — Deciding what an AI…
Intel is striking while the iron is hot, cashing in on its massive stock rally to finance the factories and technology needed for the next wave of computing. The chipmaker is taking advantage of its stock-market rebound to put nearly $20 billion more cash behind an increasingly expensive manufacturing strategy. In a press release, Intel…
Microsoft’s August 2026 Patch Tuesday delivered security fixes for 400+ vulnerabilities, including one that has been exploited in zero-day attacks (CVE-2026-68820) and three that were publicly disclosed prior to the release of the patches. Vulnerabilities of note CVE-2026-68820 is a use-after-free flaw that affects the Windows Ancillary Function Driver for WinSock (AFD.sys) and allows a…
The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country
New funding round catapults AI company into the ranks of Europe’s most valuable startups.
If you regularly find yourself in a situation where you’ve left your glasses behind and you need to read fine print or something far away, Google has an app right up your alley.
Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. Patches for…
ConnectSecure has announced that Microsoft 365 Auto Remediation and AI-powered Training Assessments are now live on the ConnectSecure platform. The capabilities help managed service providers (MSPs) address supported M365 security findings, create and measure assessments, support client training and strengthen security posture from one platform. The launch advances ConnectSecure’s focus on proactive, unified protection for…
Artificial intelligence (AI) has quickly become a strategic priority for enterprise security teams. Yet despite growing investment in AI-driven security software, many enterprise SOCs are struggling to translate AI into measurable operational improvements. The issue isn’t whether AI belongs in the SOC. It does. The challenge is that many organizations are approaching AI adoption in…
CBTS has launched Penetration Testing as a Service (PTaaS), combining autonomous penetration testing with security expertise to help organizations continuously identify exploitable risks, validate attack paths, and prioritize remediation as their environments evolve. Cloud environments, SaaS applications, connected systems, third-party relationships and AI systems are expanding enterprise attack surfaces faster than traditional testing cycles can…
Crytica Security has developed a patented solution that delivers rapid, deterministic threat detection for operational technology (OT), protecting the embedded systems and connected devices that underpin critical infrastructure, national security, and healthcare without disrupting operations. The need is becoming increasingly urgent as cybersecurity moves toward machine speed. IBM’s Cost of a Data Breach Report 2026…
Google Chrome’s latest measures against abusive web push notifications include automatically revoking notification permissions for inactive and suspicious websites, helping reduce scams, phishing attempts, and other deceptive content. Abusive notifications (Source: Google) Chrome revokes notification permissions for websites users have not recently interacted with and for sites that Google Safe Browsing identifies as engaging in…
Kimwolf v7: The Android TV Botnet That Now Hides Its Traffic Behind Chrome Fingerprints and Ethereum Palo Alto Networks Unit 42 discovered Kimwolf v7 on February 3, 2026, while hunting threats following public disclosures of the botnet’s earlier activity. The new version substantially upgrades the DDoS capabilities and command infrastructure of a botnet that has…
Ask a security researcher what makes an AI agent dangerous, and the instinct is to talk about the model — what it will and won’t refuse, how easily it can be jailbroken, whether its weights can be trusted. That instinct is increasingly out of date. A growing body of security research — exploit demonstrations, independent…
A little wind noise, a little connectivity flakiness, and a little lip-sync issues from YouTube, but look at that view! 🤩 Back to business, it’s the Brinks Home FAQ I found most interesting this week. I mean, how do you write your own FAQ then fail to actually answer most of the questions?! Being conscious…
Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday
Chaotic Eclipse released a PoC for ShieldBreak, a Microsoft Defender zero-day that bypasses the CVE-2026-50656 patch and could enable SYSTEM-level code execution. Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse, released a PoC for ShieldBreak, a Microsoft Defender zero-day. The flaw bypasses the patch for CVE-2026-50656 (RoguePlanet), a race condition that…
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens, database passwords, and other secrets from systems that installed them. Threat intelligence firm CloudSEK now says a dataset it obtained, built from roughly 434,000 files the attackers captured, maps potential…
Threat monitoring serves as the vital connective tissue of modern security operations. It ensures that every function from triage to response operates effectively. To meet evolving threat challenges, SOC teams and MSSPs must transition from simple log collection to a proactive, intelligence-driven framework. ANY.RUN’s Threat Intelligence provides the essential solutions to power this transformation across…
Spanish police have arrested a man in Murcia accused of using deepfake software to trick a certificate provider’s video identity checks in an attempt to obtain digital signatures he could use for financial fraud. According to the police, the man made 38 attempts using this method on more than 30 citizens. Police haven’t said how…
AI video generation is moving beyond short experimental clips. Creators now expect these tools to handle more than a simple text prompt and a few seconds of animation.
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation. “SAP Commerce Cloud…
In 2021, a vulnerability was revealed in a system that lay at the foundation of modern computing. An attacker could force the system to execute arbitrary code. Shockingly, the vulnerable code was almost 54 years old — and there was no patch available, and no expectation that one would be forthcoming. Fortunately, that’s because the…
Microsoft Patch Tuesday for August 2026 fixes 398 CVEs, including an actively exploited zero-day and a wormable DNS flaw enabling remote code execution. Microsoft released its Patch Tuesday security updates for August 2026 on Tuesday, covering 398 new CVEs across Windows, Office, Azure, Exchange Server, SharePoint, Teams, GitHub Copilot, .NET, and a range of other…
The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for CVE-2026-50656 (CVSS score: 7.8), otherwise known as RoguePlanet. RoguePlanet has been described
Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild. The high-severity flaw, tracked as CVE-2026-20349 (CVSS score: 8.6), is a case of insufficient error checking when processing HTTP requests that could allow an unauthenticated, remote attacker…
In this Help Net Security interview, Christopher Smith, CEO of Quantus, discusses what cryptographic inventories turn up in banks and hospitals, including default passwords and admin keys still held by former employees. He explains where post-quantum key sizes break old size assumptions in IPsec, SSH, TLS and libp2p, why migrating user keys makes blockchains hard…
Tenable called it on Tuesday: the afd.sys zero-day looked like nation-state work. The same day, Check Point named the group. It was Lazarus, and the exploit had been live for…
PentestGPT is an open-source penetration testing agent that points a large language model at a target and lets it work. In its default mode it runs recon, then exploit, then walkthrough, each stage feeding the next. Switch it to pentest mode and the stages become asset discovery, vulnerability identification, report. No human sits in the…
First, a bit of good news: Enterprise defenses are recovering. However, it’s a narrow recovery, with a twist. Today, organizations are better at stopping loud attacks but have barely moved the needle at all against the quiet ones. This data, and a lot more, comes straight from the newly published Blue Report 2026, the fourth…
By: Micah DeHarty, Intelligence Team Threat actors are weaponizing party invitation-themed emails to steal credentials and install malware on victims’ machines. Cofense Intelligence has observed a sustained rise in phishing campaigns disguised as event invitations, spoofing trusted platforms such as Punchbowl, Greenvelope, Paperless Post, and Evite. Behind the familiar branding, these emails deliver credential-harvesting login…
In this post, I will answer the question – can charter buses travel across state lines? Traveling with a large group often requires a transportation option that is comfortable, reliable, and cost-effective. Many people planning school trips, corporate events, sports tournaments, family reunions, church outings, or sightseeing tours wonder whether charter buses are allowed to…
A seller on a cybercrime forum is offering a ready-made scam kit for $500, complete with an admin panel that tracks victims, checks their crypto wallets for value, and inflates fake balances to squeeze out more money, Malwarebytes found. Researchers discovered the scam project on May 16 and described it as an example of how…
CISOs and CTOs expect AI deployments to increase their organizations’ attack surface by an average of 14% over the next year. Nearly all lack visibility into AI deployments, and 90% are concerned about employees using unapproved AI tools outside formal oversight, according to NetFoundry’s 2026 State of Secure AI Access survey. Key aspects of AI…
Most board minutes are written for the meeting that has just happened. The useful ones are written with a second audience in mind: the person trying to understand the decision…
Business intelligence (BI) platform provider Metabase has disclosed a zero-day SQL Injection vulnerability, warning that customers’ sensitive credentials, tokens, API keys, and other data may have been exposed. The Metabase vulnerability revealed on August 6, designated CVE-2026-72898, is identified as critical, with a severity score of 10, the highest possible rating. It is present in…
New partnership offers Australian enterprises a cost-effective virtualisation path, after Centorrino Technologies CT avoided significant cost increases on its own…
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
From marathon training to tracking office angst, health obsessives are linking their data to chatbots to build hyperpersonalized coaches.
In this post, I will talk about overcoming smart device integration challenges. Smart homes rarely fail because people buy the wrong gadget. More often, they struggle because the home ends up acting like a collection of tiny digital islands. One app controls the lights. Another runs the thermostat. A third handles cameras. Then a voice…
In this post, I will answer the question – what is the digital personal data protection act and who does it apply to? It’s not news that there’s an increase in reliability on digital information. We live in an era of rapid digitization of data. Our personal, organisational, healthcare, educational and financial identity exists online.…
New Commvault research finds many organisations are still making short term ransomware decisions instead of building long term cyber resilience.
New “Secret Agent” themed campaign-in-a-box equips organisations with training module and tabletop exercises to educate employees to combat cybercrime
In this post, I will talk about custom AI chatbot development. Everyone seems to want a chatbot these days. The market backs that up, with projections putting global chatbot spending well past 27 billion dollars by the early 2030s. But there’s a catch most people miss. A generic bot pulled off a shelf and a…
Organisations are fundamentally redesigning data architectures to support trusted, scalable AI across hybrid environments.
Executives involved are hailing it as a new asset class, but critics have concerns about using chips as collateral.
Google says Chrome’s anti-abuse systems reduced unwanted notifications on Android by more than 7 billion per day during the first quarter of 2026. […]
More girls in Colombo will have hands-on access to technology after Superloop opened the Superloop Future Minds Lab at Anuruddha Balika Vidyalaya, a girls’ school, on Tuesday 4…
Three-year agreement supports Macquarie Cloud Services’ Azure growth and helps Australian organisations modernise with confidence
A currently exploited zero-day elevation of privilege vulnerability that needs to be patched in a Windows driver for WinSock is the highlight of the 398 fixes issued today in Microsoft’s August Patch Tuesday releases. The hole is in Windows’ Ancillary Function Driver for WinSock (CVE-2026-68820), which, according to Todd Schell, principal product manager at Ivanti,…
Kiosk combines HID document authentication and facial recognition with Soloinsight’s CloudGate visitor management system to deliver identity assurance across the visitor lifecycle
New service helps organisations address IT skills shortages, reduce infrastructure complexity, and optimise technology costs
The developers of a notorious botnet that’s powered mostly by hijacked Android TV boxes and other internet-connected devices have released a new version built to blend attack traffic in with ordinary web browsing and to keep its command channels from being seized by law enforcement, researchers at Palo Alto Networks said in a report published…
Approximately 550 employees were part of the first live payroll as the Council replaced legacy systems and advanced its wider Our Council transformation programme.
Although 84 per cent of executives are at least somewhat confident in AI output without human review, only 11 per cent believe their data quality is sufficient for AI use
The unauthorized network, named “Delta WiFi Fast,” was reportedly created by passengers attending the DEF CON hacker conference.
Wesco confirmed the incident involves its cloud CRM environment and stated that it is working with its vendor.
The group, which extorts victims by threatening to publish stolen data rather than using ransomware, has expanded its operations, according to a recent report by Resecurity.
The unnamed man targeted a security company authorized to issue digital certificates, a process crucial for online authentication and legally recognized electronic signatures in Spain and other EU countries.
A federal judge has issued a second injunction preventing the United States Postal Service from carrying out President Donald Trump’s executive order focused on mail-in voting. Judge Indira Talwani had previously ruled that the White House order, which would have essentially placed the federal government in charge of deciding which voters in each state would…
Zoom has fixed four vulnerabilities across its applications, including two that could allow attackers who join a meeting to execute malicious code on the systems of all other meeting participants with no interaction required from them. Three of the vulnerabilities affect all Zoom client applications for all platforms before versions 7.1.5 and 7.0.6, while the…
Recorded Future’s Insikt Group® has released its latest CVE report for July 2026, which identifies 85 high-impact vulnerabilities that ANZ organisations should prioritise for…
Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as “critical.” Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-68820 is an elevation of privilege vulnerability affecting Windows Ancillary Function Driver for WinSock. A Use After…
Passengers on a Delta flight from Las Vegas to Atlanta experienced a disruption when an unauthorized Wi-Fi network prompted the crew to temporarily disable onboard Wi-Fi. Delta is now investigating the incident, which occurred on Flight 591 carrying passengers returning from the DEF CON 34 cybersecurity conference. “Incidents like this are a reminder that convenience…
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity. […]
In late 2019, security researchers disclosed two critical flaws in Rittal’s SK 3232-series chillers, the units that cool server rooms, comms rooms, and process equipment in…
Organizations operating in Germany and across Europe increasingly need to demonstrate cloud security compliance under the Cloud Computing Compliance Criteria Catalogue (C5:2020), published by Germany’s Federal Office for Information Security (BSI). Last year, we introduced Landing Zone Accelerator on AWS support for digital sovereignty and today we’re announcing the availability of a new independent assessment…
Security experts say prioritization should be the main focus for the August updates, not the massive CVE volume.
Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today. Image: Shutterstock, Mallika Home Studio. August’s overstuffed bundle of patch joy from Microsoft did not eclipse its…
Cybersecurity teams can run into an awkward problem with AI. Legitimate defensive work can resemble the same activity a model is trained to restrict. OpenAI is addressing that problem by expanding Daybreak with two access tiers for approved defenders. Blue supports common defensive workflows, while Red provides access to specialized models for advanced, authorized security…
A city council bill backed by the mayor would require big delivery operators to directly employ couriers instead of relying on subcontractors.
Imagine submitting your vibe-coded app to a service that validates, tests, and then mass-produces it in a repeatable, automated fashion for delivery to a wide audience.
CISA gave no specifics, but one expert said it’s potentially the work of China-linked Storm-2603.
The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.
Hackers associated with the Russian threat group Sandworm have been targeting system administrators and IT professionals through fake job offers since at least May. […]
Most AI flyers are still a mess, but the right prompts can make all the difference.
A fake version of the popular PC cleaning tool CCleaner is being used to infect Windows users with a malicious Chrome extension called GhostDesk, which acts as spyware inside the browser. With more than 2 billion downloads worldwide, CCleaner is one of the best-known Windows utilities, making it an attractive target for cybercriminals looking to…
Mounting order book of $104 billion shows strong demand for cloud computing despite infrastructure challenges and AI-bubble fears.
Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That patch goes out…
Anthropic will begin labeling AI-generated content created by Claude, Claude Code, and the company’s API, as well as Claude models via third-party services, according to The Register. Text generated by future Claude models will be given an invisible watermark. According to Anthropic, the watermark is embedded directly into the generated text without affecting its meaning…
Cisco is warning that a high-severity denial-of-service vulnerability in Secure Firewall ASA and Threat Defense (FTD) software is being actively exploited in attacks to remotely crash affected devices. […]
Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that comes with significant improvements to improve its operational resilience and conduct distributed denial-of-service (DDoS) attacks. The new version, tracked as Kimwolf v7, was discovered by Palo Alto Networks Unit 42 in February 2026. “Kimwolf v7 adds an…
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter’s. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the victim beyond being in…
Amazon Web Services (AWS) is pleased to announce that the Summer 2026 System and Organization Controls (SOC) 1 report is now available. The reports cover 185 services over the 12-month period from July 1, 2025–June 30, 2026, giving customers a full year of assurance. These reports demonstrate our continuous commitment to adhering to the heightened…
A new phishing campaign is making fake websites look trustworthy by giving them the same HTTPS security signal people usually associate with legitimate sites. Security researchers at Clandestine said they identified newly activated phishing and interface-cloning infrastructure that appears designed to target customers of high-value brands, with a primary focus on WhatsApp and Instagram. According…
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the country by masquerading as recruiters to trick them into installing malware. CERT-UA pinned the activity on a threat cluster it tracks as UAC-0145, which is a subgroup…
Delta Air Lines is investigating an unauthorized Wi-Fi network that appeared aboard a flight from Las Vegas to Atlanta carrying passengers who had attended the DEF CON hacker convention. […]
Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs;…
Microsoft has released Windows 10 KB5120249 cumulative update for versions 22H2 and 21H2 to fix security vulnerabilities and bugs. […]
A cyberattack at CEVA Logistics is now surfacing in customer notices across Europe. CEVA said the intrusion affected part of its European contract-logistics operation, including eight warehouses. Several clients have since notified customers that information held by CEVA may have been accessed. Client notices are beginning to clarify which organizations and data types were affected.…
Today is Microsoft’s August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. […]
A shared security-testing vendor may explain why AI models from OpenAI, Anthropic and Meta all reached systems they were never supposed to access. CNBC reported that the three incidents involved Irregular, an Israeli security firm that evaluates the offensive capabilities of advanced AI models. In the affected tests, configuration weaknesses reportedly gave the models pathways…
