The 7 biggest issues CISOs and security teams face today
“Month to month, companies come out with new direction, new tools, new functions, and new features that have to be considered by security. There are…
Year: 2026
CISA, FBI and NSA expose Integrity Technology Group’s role in China-linked attacks on critical infrastructure
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), the National Security Agency (NSA) and international partners warned that Chinese…
NSA urges zero-trust controls to protect DoW OT systems from evolving cyber threats, unauthorized access
The National Security Agency (NSA) outlined 26 high-impact zero-trust activities to strengthen cybersecurity across Department of War (DoW) critical operational technology (OT) environments, including legacy…
Wiz’s agentless approach to cloud-native vulnerability management
In today’s ever-evolving digital landscape, cloud environments have become the backbone of modern businesses. However, as cloud environments grow and become more complex, the more…
FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach
The FBI has arrested another suspected ShinyHunters co-conspirator as investigators pursue the group believed to be behind the FBIJobs.gov breach. Director Kash Patel announced the…
Android Firmware Malware Uses Ad Fraud and Proxy Botnets to Generate Revenue
Midnight Mimosa, an Android malware campaign embedded in firmware that monetizes compromised smartphones through advertising fraud and residential proxy services. Disclosed on October 8, the…
Windows PCs missing key updates could lose security fixes in 2027
Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027.…
A week in security (October 5 – October 11)
Last week on Malwarebytes Labs: Stay safe! Browse like no one’s watching. Malwarebytes Privacy VPN encrypts your connection and never logs what you do, so the next…
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine.…
Undercover agent: Can process mining police AI automation?
“The challenge is monumental. Even under the best circumstances, the transition to this new AI era will be one of the most turbulent times in…
NetScaler builds that fixed zero-days carry critical flaw, too
Key points Citrix has disclosed CVE-2026-107406, a critical memory overflow in NetScaler ADC and Gateway builds that patched last month’s exploited flaws, scoring 9.5 on…
Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Open Certificate Authority (CA) Let’s Encrypt is taking the first step towards reducing the validity period of the certificates it issues. Beginning February 10, 2027,…