For almost 20 years, stolen credentials have been the most common route for attackers into organizations, according to the Verizon Data Breach Investigations Report (DBIR). But that’s no longer the case. Read more in my article on the Fortra blog.
Tag: common
AI, Data Breaches, Exploits, Global Security News, Network Security
Verizon DBIR: Vulnerability exploitation is the dominant initial access vector
Vulnerability exploitation has overtaken stolen credentials as the most common way attackers gain initial access to target networks, according to the 2026 Verizon Data Breach Investigations Report. This is the first time credential theft has been knocked off the top spot in the report’s 19-year history, the company noted. Known initial access vectors over time…
AI, Cybersecurity, Exploits, Global Security News, Network Security
Cisco zero-day under ongoing attack by persistent threat group
Attackers returned once again to a common target with a massive user base by exploiting a max-severity zero-day vulnerability affecting Cisco Catalyst SD-WAN Controller and Manager. The threat group behind the “limited” number of attacks Cisco is aware of thus far are also linked to a series of previously disclosed vulnerabilities in the vendor’s firewalls…
AI, Europe, Global Security News, privacy, Risk Management
The trouble with emotion-reading AI
“If you can’t measure it, you can’t fix it.” That’s a common saying in business, and it tends to be true. But what if the thing you want to fix is your employees’ attitudes? The AI revolution makes it possible to measure emotions and mental states. So why not use it widely and fix what’s…
AI, china, Cybersecurity, Endpoint, Europe, Exploits, Global Security News, Government & Policy, Network Security, Risk Management
Ivanti customers confront yet another actively exploited zero-day
Attackers are hitting Ivanti customers yet again — circling back to a common target and consistently susceptible vendor in the network edge space — by exploiting a zero-day vulnerability in one of the company’s most besieged products. Ivanti warned customers that attackers have successfully exploited CVE-2026-6973, an improper input validation defect in Ivanti Endpoint Manager…
AI, Global Security News, Risk Management
Legitify: Open-source scanner for security misconfigurations on GitHub and GitLab
Misconfigured source code management platforms remain a common entry point in software supply chain attacks, and organizations often lack visibility into which settings put them at risk. Legitify, an open-source tool from Legit Security, addresses that gap by scanning GitHub and GitLab environments and reporting policy violations across organizations, repositories, members, and CI/CD runner groups.…
AI, Cybersecurity, Global Security News
Common Mistakes to Avoid When Using Walk-Through Metal Detectors
Discover the most common mistakes when using walk-through metal detectors and learn how to improve security, accuracy, and performance with expert tips. In an age where security threats are becoming increasingly sophisticated, walk-through metal detectors have evolved into a frontline defense tool across airports, offices, public venues, and high-security zones. While these systems are designed…
AI, Cybersecurity, Global Security News, Risk Management
Urban Driving Car Accident Factors and Common Risks in Charlotte
In this post, I will talk about urban driving car accident factors and common risks in Charlotte. In Charlotte, daily driving patterns often involve busy intersections, stop and go traffic, and constant lane changes that increase the chances of unexpected collisions. From rear end crashes near Uptown to side impact accidents at crowded intersections, these…
AI, Global Security News, malware, privacy, Risk Management
Don’t sleep on this powerful new Chrome security booster
When it comes to staying safe online, the teensiest shred of common sense goes an impressively long way. That’s absolutely true on Android, as I’ve been preaching for more years than I can even remember at this point — and it’s true on the web, too, especially when you’re working within the desktop browser you…
AI, Global Security News
How Organizations Can Use Blunders to Level Up Their Security Programs
The industry highlights how organizations repeatedly make common security mistakes but one session during RSAC detailed ways to avoid them.
AI, Global Security News
SANS: Top 5 Most Dangerous New Attack Techniques to Watch
For the first time, SANS Institute’s five top attack techniques all have one thing in common – AI.
AI, Apps, Exploits, Global Security News
/proxy/ URL scans with IP addresses, (Mon, Mar 16th)
Attempts to find proxy servers are among the most common scans our honeypots detect. Most of the time, the attacker attempts to use a host header or include the hostname in the URL to trigger the proxy server forwarding the request. In some cases, common URL prefixes like “/proxy/” are used. This weekend, I noticed a slightly…
AI, Global Security News, Government & Policy
YouTube draws a line on deepfakes involving politicians and journalists
With deepfakes becoming more common, YouTube has expanded access to its AI-driven likeness detection system to a pilot group of government officials, journalists and political candidates. The step follows an earlier rollout of the tool to creators in the company’s Partner Program. AI video tools are easy to access, and the content they produce keeps…
AI, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, Risk Management
Fake Claude Code Install Pages Spread Infostealer Malware
Threat actors are exploiting a common developer habit — copying installation commands directly from websites — to distribute malware through fake software installation pages. Security researchers at Push Security recently uncovered a campaign targeting users of Anthropic’s Claude Code, a popular command-line AI coding assistant. The attackers are using cloned websites and malicious search advertisements…
AI, Apps, Global Security News
Microsoft adds domain libraries and Copilot integration to the quantum development kit
The Microsoft Quantum Development Kit (QDK) is an open-source toolkit that runs on laptops and in common development environments. It includes code, simulators, libraries, and workflows that work with Visual Studio Code and GitHub Copilot. Integration with these tools gives developers features for writing, testing, debugging, and submitting quantum code. The QDK supports multiple programming…
AI, Data Breaches, Global Security News
Data Breaches in 2026: What’s old, what’s new?
Data breaches in 2026 explained, new cyber threats, AI driven attacks, common breach causes, and practical security strategies for individuals and businesses
Global Security News, Scams
OfferUp scammers are out in force: Here’s what you should know
The mobile marketplace app has a growing number of users, but not all of them are genuine. Watch out for these common scams.
Advanced (300), AI, Apps, Compliance, Global Security News, Identity & Compliance, Risk Management, Security, Identity, & Compliance
Exploring common centralized and decentralized approaches to secrets management
One of the most common questions about secrets management strategies on Amazon Web Services (AWS) is whether an organization should centralize its secrets. Though this question is often focused on whether secrets should be centrally stored, there are four aspects of centralizing the secrets management process that need to be considered: creation, storage, rotation, and…
Advanced (300), AI, Apps, Compliance, Global Security News, Identity & Compliance, Risk Management, Security, Identity, & Compliance
Exploring common centralized and decentralized approaches to secrets management
One of the most common questions about secrets management strategies on Amazon Web Services (AWS) is whether an organization should centralize its secrets. Though this question is often focused on whether secrets should be centrally stored, there are four aspects of centralizing the secrets management process that need to be considered: creation, storage, rotation, and…