The Latest
-
Matt Kapko/Cybersecurity Dive
Ransomware groups expand targeting of Palo Alto Networks vulnerability
Multiple threat actors have exploited a high-severity flaw in the company’s GlobalProtect portal.
-
Permission granted by HPE
Sponsored by Hewlett Packard EnterpriseQ-day is coming: How to prepare for post-quantum security challenges
Q-day is coming. Discover how to prepare your IT infrastructure for post-quantum security challenges.
-
Robert Way via Getty Images
AI security hiring focuses on red-teaming, SOC orchestration and governance
Roles mitigating AI deepfakes and overseeing post-quantum encryption rollouts are on the horizon, according to the SANS Institute.
-
Getty Images
Boards confident on cybersecurity, AI oversight, but tech changes outpace readiness
Nearly half of corporate directors think board members need cybersecurity expertise, a new survey found.
-
Permission granted by ConnectWise
ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users
Managed service providers said an attacker used compromised credentials to gain access to tenants.
-
Getty Images
China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign
Researchers say the hacker is harvesting credentials and stealing sensitive information.
Updated Oct. 16, 2026 -
Getty Images
Open-source security rests on understanding risks, scaling fixes
Developers should coordinate security work to make the most of their interconnected ecosystem, IBM said in a new report.
-
Alamy
Thousands of refrigerator devices remain exposed following French cyberattack
The investigation points to a much wider risk for industrial systems across the globe.
Updated Oct. 15, 2026 -
Getty Images
Internet exposure of AI tools, ICS devices continues to grow
Vulnerability disclosures and hacking campaigns haven’t made much of a dent in the amount of important infrastructure left online, a new report found.
-
Devrimb
Hacker targets Ivanti Connect Secure in chained exploitation
Researchers warn the attacker is taking multiple steps to clean up forensic evidence after an attack.
-
Carl Court via Getty Images
Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests
The latest operation targeted “laptop farms” across Texas that allegedly aided North Korea’s moneymaking plots.
-
Getty Images
Microsoft, Health-ISAC and partners take down popular phishing kit services
The three marketplaces helped hackers impersonate major businesses and governments. Microsoft now controls the markets’ domain names.
-
AdrianHancu via Getty Images
Dangerous flaws in refrigeration equipment were disclosed months before retail attacks
Hundreds of French supermarkets faced a sophisticated cyberattack, allowing hackers to manipulate industrial controls.
Updated Oct. 13, 2026 -
Getty Images
Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud
Risks are growing at a time when companies rely more than ever on vendors for cybersecurity, according to a new report.
-
Citrix via Flickr
CISA calls on Citrix NetScaler customers to patch as new flaws disclosed
A newly discovered critical vulnerability is adding to the workload of customers mitigating other recent flaws.
Updated Oct. 12, 2026 -
Peyton Bigora/Cybersecurity Dive, data from 10/12/2026
Ahold Delhaize experiencing cybersecurity issue
The company said it took some systems offline as part of “precautionary measures.” Websites for all five of the grocer’s U.S. banners were down Monday morning.
-
Getty Images
GitLab fixes critical vulnerability that exposed software environments to sabotage
The company urged customers to upgrade to the latest versions of its flagship products.
-
Getty Images
FBI seizes domains linked to China-nexus botnet
The infrastructure supported an international hacking campaign that targeted critical providers, including a South Carolina-based power company.
-
Getty Images
Deep DiveAs frontier models go rogue, colleges beef up AI cybersecurity education
Student interest in AI safety is growing rapidly, and schools are rushing to prepare for new career paths.
-
Getty Images
What the C-suite needs to know about AI governance
As AI adoption surges, executives are learning tough lessons about security, oversight and accountability.
-
Thomas Niedermueller via Getty Images
US government lagging in transition to post-quantum encryption, GAO finds
Auditors warned that agencies risked leaving sensitive data exposed to future decryption attacks.
-
Getty Images
AI underscores singular importance of phishing-resistant authentication, Okta says
The company presented new data about the prevalence of different forms of social-engineering attacks, saying identity fundamentals still matter in the AI era.
-
iStock Editorial / Getty Images Plus via Getty Images
FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
An initial access broker is working with various ransomware groups in a global campaign.
-
Tomohiro Ohsumi via Getty Images
US cyber resilience, oversight tested in series of attacks
Attacks targeting key industrial sites and unforced errors among leading AI companies are raising alarm bells.
-
Sean Gallup / Staff via Getty Images
IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws
The tech giant’s announcement underscores the insufficiency of companies’ existing software supply chain security practices.
-
Citrix via Flickr
Citrix issues patch for third exploited flaw in NetScaler
The memory overflow vulnerability could lead to a denial-of-service condition under certain circumstances.
Updated Oct. 5, 2026
