2,400 articles · page 6 of 48
Security Boulevard, Friday, March 6th, 2026
An analysis of 136 unique major breaches involving third-parties affecting 710 companies, published this week by Black Kite, finds approximately 26,000 additional organizations were impacted, affecting as many as 433 million individuals.
more →
The Hacker News, Thursday, March 5th, 2026
Organizations typically roll out multi-factor authentication (MFA) and assume stolen passwords are no longer enough to access systems. In Windows environments, that assumption is often wrong. Attackers still compromise networks every day using valid credentials. The issue is not MFA itself, but coverage.
more →
LevelAct, Wednesday, March 4th, 2026
Cloud security in 2026 isn't just about firewalls and vulnerability scans anymore. The cloud has become the execution environment for AI, the connective tissue for APIs, and the storage layer for high-value data. That combination-AI workloads + APIs + sensitive data-creates a threat surface that is broader, faster-moving, and more complex than the 'cloud security' conversations of a few years ago.
more →
The Hacker News, Tuesday, March 3rd, 2026
Every CISO knows the uncomfortable truth about their Security Operations Center: the people most responsible for catching threats in real time are the people with the least experience. Tier 1 analysts sit at the front line of detection, and yet they are also the most vulnerable to the cognitive and organizational pressures that quietly erode SOC performance over time.
more → Security Boulevard, Tuesday, March 3rd, 2026
Modern enterprises are rapidly shifting toward API-centric architectures, leveraging APIs to connect internal systems, external partners, and digital services. With 74% of organizations adopting API-first development models, APIs now drive critical business logic and data exchanges at scale.
more → ZDNet, Monday, March 2nd, 2026
Generative AI is moving from chatbot to autonomous actor. When agents can launch other agents, spend money, and modify systems, the line between productivity tool and insider threat disappears.
more →
ZDNet, Monday, March 2nd, 2026
Don't wait until AI-enabled deepfakes and malware overwhelm your organization. Experts recommend these aggressive best practices for hardening your defenses.
more → Help Net Security, Thursday, February 26th, 2026
This month's roundup features exceptional open-source cybersecurity tools that are gaining attention for strengthening security across various environments.
more →
Security Boulevard, Thursday, February 26th, 2026
Security models that were effective a few years ago are now under immense strain because of how rapidly organizations are changing. As we move into 2026, many teams are dealing with a larger and more complex risk landscape.
more →
Search Security, Thursday, February 26th, 2026
Forewarned is forearmed, and dark web monitoring can alert organizations when they're in attacker crosshairs. But for many, the risk and expense make it more trouble than it's worth.
more →
Professional Security Magazine, Wednesday, February 25th, 2026
Now free to read as a 'flip page', digital edition online and landing through physical letter-boxes is the March edition of Professional Security Magazine. Its major feature is the Police Reform White Paper, promising more of everything from the Labour Government; more tech for police, more professional performance, and a continued stress on neighbourhood policing.
more →
Security Boulevard, Wednesday, February 25th, 2026
Vulnerability management today is not failing because teams stopped scanning. It's failing because the ground underneath it shifted.
more →
CyberSecurity Dive, Wednesday, February 25th, 2026
A report by VulnCheck shows threat groups are exploiting a small percentage of critical flaws well before security teams can mitigate.
more →
Dark Reading, Wednesday, February 25th, 2026
Attackers are bypassing email gateways through telephone-oriented attack delivery (TOAD), in which the only email payload is a phone number.
more →
techradar.pro, Wednesday, February 25th, 2026
Patching is not a security strategy - it is a change-management decision with financial, operational, and risk consequences.
more → The Register, Wednesday, February 25th, 2026
And they're being stressed by geopolitical concerns that threaten to slow important data-sharing efforts
more →
ET Insights, Tuesday, February 24th, 2026
The modern ransomware attack no longer begins with a dramatic breach. It begins quietly with a login that looks routine, a firewall rule that appears legitimate, or a user added to a privileged group during what seems like everyday IT maintenance.
more →
Security Boulevard, Monday, February 23rd, 2026
SOAR is a set of tools that help organizations and enterprises efficiently respond to cyberthreats by automating important tasks involved in robust cybersecurity practices.
more →
techradar.pro, Monday, February 23rd, 2026
Data security and readiness for AI are IT teams' biggest priorities
more → IT Security Guru, Friday, February 20th, 2026
Cybersecurity expert Purvi Kay spoke to the IT Security Guru about what it takes to be a true cyber leader and what the future of the industry may hold
more →
How-To Geek, Friday, February 20th, 2026
I've used Bitwarden for years, and for a long time I felt pretty good about that decision. I wasn't reusing passwords, I had strong, unique logins everywhere, and I wasn't relying on my browser to remember everything. But lately, with the steady rise in account takeovers, phishing kits, and credential-stealing malware, 'pretty good' stopped feeling good enough.
more →
Security Boulevard, Thursday, February 19th, 2026
How should security rules be organized? At first glance, this sounds like a simple data-modeling choice. In practice, it defines the daily reality of security operations: how quickly incidents can be debugged, how safely policies can evolve, how easily new offices or user communities can be onboarded, and whether growth leads to clarity-or chaos.
more → The Hacker News, Wednesday, February 18th, 2026
In 2025, navigating the digital seas still felt like a matter of direction. Organizations charted routes, watched the horizon, and adjusted course to reach safe harbors of resilience, trust, and compliance.
more → tech.co, Wednesday, February 18th, 2026
Plus, AI-powered phishing campaigns represented over 80% of social engineering events in 2025.
more →
Security Boulevard, Wednesday, February 18th, 2026
You know the drill - monitoring has basically turned into dashboard upon dashboard. What actually predicts a breach rarely fits neatly into a slide. The signals are uncomfortable, sometimes embarrassing, and usually harder to measure.
more → Security Boulevard, Wednesday, February 18th, 2026
We are seeing a steady rise in cyberattacks against critical infrastructure and it's not surprising. Many of these systems rely on legacy software riddled with known vulnerabilities. When these systems fail, the impact moves quickly from networks to operations, and from operations to public safety.
more → SecurityWeek, Tuesday, February 17th, 2026
New research shows attackers increasingly abusing APIs at machine speed as AI-driven systems widen exposure and amplify impact.
more →
SC Media, Tuesday, February 17th, 2026
For your organization to stay ahead of current and future threats, it can't rely on yesterday's cybersecurity technology. Unfortunately, even as attackers continue to refine their skills and use new techniques, many companies continue to deploy outdated firewalls and legacy endpoint protections.
more → SC Media, Tuesday, February 17th, 2026
A seismic shift has taken place, one so profound that only a handful of companies will survive in its wake. This isn't incremental improvement: it's a foundational rewrite of how software, infrastructure, and networks operate, powered by GPU-driven reasoning, ultra-fast inference, collapsing cost curves, and agentic intelligence.
more → SC Media, Tuesday, February 17th, 2026
Identity abuse now drives nearly two-thirds of all breaches, according to a Feb. 17 report by the Unit 42 research group at Palo Alto Networks.
more → Security Boulevard, Tuesday, February 17th, 2026
Defenders might be bummed, but not surprised, to know that adversaries have shifted from immediate disruption to long-lived access, according to research from Picus Labs.
more → Security Boulevard, Monday, February 16th, 2026
Firewall penetration testing examines the firewall as a security control and identifies the weaknesses that allow unwanted traffic to reach internal systems.
more → Secure Reading, Friday, February 13th, 2026
Attackers rarely 'hack' systems directly anymore. Instead, they log in. Phishing, credential stuffing, password reuse, and data breaches have made passwords easy to steal and cheap to abuse.
more →
Security Boulevard, Friday, February 13th, 2026
A survey of 512 cybersecurity professionals finds 76% report that over half (54%) of the security incidents that occurred in the past 12 months involved some issue relating to identity management.
more → Security Boulevard, Thursday, February 12th, 2026
In cybersecurity, we like to believe that leaders are created by better products, stronger execution, and higher revenue. That belief is incomplete.
more → Security Boulevard, Wednesday, February 11th, 2026
Amazon Web Services (AWS) is a cloud-computing platform offered by Amazon, which provides cloud services such as computing power, storage, databases, networking, and automated intelligence. AWS replaces data centres, builds applications, and offers pay-as-you-go. The unique features of AWS are scalability, global infrastructure, security, cost-effectiveness, and flexibility.
more → Security Boulevard, Wednesday, February 11th, 2026
Over the last few weeks I published a post on the architectural and operational gaps that created the new wave of SIEM and AI SOC vendors. A bunch of people asked the same follow-up question: 'Ok, but how do I evaluate vendors consistently without falling back into feature checklists and marketing claims?'
more → The Hacker News, Wednesday, February 11th, 2026
It's Patch Tuesday, which means a number of software vendors have released patches for various security vulnerabilities impacting their products and services.
more → Analytics Insight, Wednesday, February 11th, 2026
How Behavioral AI and Zero Trust Could be Shaping Cybersecurity Software
more →
Dark Reading, Wednesday, February 11th, 2026
CISOs should focus on harnessing and securing AI and building new skills among their people. Vision and change management can transform security.
more → siliconANGLE, Monday, February 9th, 2026
A new report out today from security rating firm SecurityScorecard Inc. warns that widespread vulnerabilities in OpenClaw deployments have left tens of thousands of internet-facing instances exposed to takeover through misconfigured access controls and known exploits.
more →
Analytics Insight, Monday, February 9th, 2026
Must-Read Books for Cybersecurity and Ethical Hacking
more → Architecture and Governance, Monday, February 9th, 2026
For years, most organizations have assumed that Identity Governance and Administration (IGA) was all about compliance. With that in mind, most of them invested heavily to ensure they remain in good books with regulators and auditors. Whether it's completing access reviews on time, signing off on certificates, generating necessary reports, you name it! Everything seemed to check out. At least on paper. In reality, things played out a bit differently.
more →
Information Week, Monday, February 9th, 2026
AI is exposing blind spots in traditional security defenses. CIOs may be creating new risks as fast as they can eliminate them. Is automation the only viable response?
more →
SC Media, Monday, February 9th, 2026
Looking to finally modernize and secure federal government networks, the Cybersecurity and Infrastructure Security Agency (CISA) on Feb. 5 gave civilian agencies one year to replace all end-of-support (EoS) edge devices.
more → The Register, Monday, February 9th, 2026
The creators of security software have encountered an unlikely foe in their attempts to protect us: modern compilers. Today's compilers boil down code into its most efficient form, but in doing so they can undo safety precautions.
more → The Record, Thursday, February 5th, 2026
Federal civilian agencies have been ordered to remove end-of-life devices within 12 months due to widespread exploitation campaigns by sophisticated hackers.
more →
Search Security, Wednesday, February 4th, 2026
Cybersecurity threat intelligence feeds provide critical data on attacks, including IPs, domains and malware hashes, helping teams detect and respond to threats effectively.
more → Help Net Security, Wednesday, February 4th, 2026
National governments already run cybersecurity through a mix of ministries, regulators, law enforcement, and private operators that own most critical systems.
more → Security Boulevard, Wednesday, February 4th, 2026
Ever felt like you're drowning in xml tags while trying to get a simple login working? SAML is that old-school beast that still runs the show for big enterprise deals, even if it feels a bit clunky compared to modern stuff.
more →