CISA stories
Only a small fraction of disclosed flaws are likely to hit suppliers, leaving security teams to focus on the 58 highest-risk CVEs.
Exposed systems are becoming the main target, as Rapid7 says flaws were used in 38% of incidents and patch windows shrank to five days.
Patch teams are falling behind as exploited flaws pile up, with 47 million instances still open after a year, Qualys data shows.
The free cloud service gives Veeam users and service providers a single view of scattered backup clusters as ransomware risk grows.
Rising breaches and weak credential habits are forcing businesses to adopt passkeys, multi-factor authentication and tighter access controls.
Many firms cannot pause AI systems quickly or explain failures to regulators, according to ISACA's European survey of 681 professionals.
Regulated agencies can now use Elastic’s security tools inside disconnected Google cloud environments as threats grow more automated.
Pressure is growing on AI vendors and software suppliers to improve vulnerability disclosure as experts warn basic CVE details are no longer enough.
The Tel Aviv startup says enterprises need runtime controls as AI agents take on more privileged tasks across core business systems.
Attackers are now exploiting flaws before patches exist, leaving 85% of vulnerable assets unpatched at disclosure across 10,000 organisations.
Rapid7 warns exploited high and critical software flaws more than doubled in 2025, as attackers compress disclosure-to-attack windows.
FIRST to host three cybersecurity conferences in 2026 as it predicts annual CVE disclosures will surpass 50,000 for the first time.
Microsoft's March Patch Tuesday fixes 77 flaws, including a severe SQL Server bug that could grant attackers sysadmin rights remotely.
Cayosoft posts 76% ARR jump for 2025 as identity recovery demand soars and it wins major public sector and enterprise customers.
China-linked Warlock ransomware group exploits SmarterMail flaw for admin takeovers, chaining features to gain full Windows control.
Attackers are abusing Windows screensaver files in a spearphishing campaign to stealthily install remote access tools on business systems.
As hybrid IT sprawl fuels blind spots and AI-driven attacks, experts say only a zero trust, hybrid mesh rethink can secure modern networks.
Federal contractors face rising scrutiny as speakers warned CMMC and AI are becoming central to procurement, resilience and national security.
Horizon3.ai opens Iranian cyber threat intel to all NodeZero users as Western organisations brace for state-backed digital retaliation.
Terra Security unveils Terra Portal, a desktop hub fusing AI agents with human pentesters to speed vulnerability fixes from months to hours.
