Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks
Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials from VMware virtual disks. After exploiting a…
Year: 2026
Claude Security can now spot vulnerabilities that reappear in code
Anthropic has updated Claude Security with ongoing code scanning and automatic fix tracking to help security teams monitor vulnerabilities as software changes. The service scans…
Delivery bots accused of illegally scanning customers
Two Chicago customers say robots delivering their groceries and takeout scanned their faces and hands without consent, stored the data alongside their names and addresses,…
Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed “anomalous activity” related to systems that store customer environment variables. Upon further investigation, the company found that an…
Barclays to cut 5,000 jobs and employ more artificial intelligence
Barclays Bank is planning to reduce its headcount by 5,000 as technology such as artificial intelligence (AI) drives cost-cutting. The number equates to 5% of…
AI-Built Websites Are Leaking Live API Keys, Cyble Finds
A growing number of AI-built websites are going live with their most sensitive credentials visible to anyone who opens the page. New research from Cyble…
Splunk, SolarWinds Release Fresh Security Updates
Splunk and SolarWinds this week released patches for multiple vulnerabilities, including flaws leading to code execution, privilege escalation, denial-of-service (DoS), and information disclosure. On Wednesday,…
FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations
FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations Pierluigi Paganini October 22, 2026 SafePay ransomware has hit 600+ organizations since 2024, using…
Encryption isn’t enough to protect data wherever it goes
Cybersecurity policy has long treated data protection as a systems problem: encrypt the database, secure the network, restrict access, monitor activity, and keep attackers out.…
Hong Kong watchdog joins global agencies to warn of web scripting hack risks
A Hong Kong information security watchdog issued an “extremely high risk” warning on Thursday morning over two critical flaws in a widely used web programming…
Microsoft: Treat AI agents as insider threats
EVP of Microsoft Security Hayete Gallot writes in a blog post that AI agents operating independently within companies could be a serious security threat. According to Microsoft,…
Wiz is on the FedRAMP Marketplace
Here at Wiz, we are actively working towards our FedRAMP® moderate authorization and are excited to be listed as “in process” on the FedRAMP Marketplace.…