AI accelerates path from IT compromise to OT targeting
Commercial AI is not yet inventing novel ways to disrupt industrial processes. It is helping non-specialist attackers interpret unfamiliar environments and operationalise known techniques far…
Year: 2026
AGL hits half-million milestone with passkey adoption
Key points AGL has reached 500,000 unique customer enrolments for passkeys since introducing them in December last year, lifting its overall adoption rate to 30.5…
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
A China-linked threat actor has been using the open source AI penetration testing framework Artex to automate a recent ConnectWise hacking campaign targeting hundreds of…
INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown
INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown Pierluigi Paganini October 23, 2026 INTERPOL’s Operation Serengeti III led to…
Understanding PHP2Shell: Everything you need to know about CVE-2026-109618 & CVE-2026-109619
PHP remains one of the most widely deployed server-side languages on the web. Estimates suggest it powers close to 70% of all websites, from small…
Azul issues urgent Java security updates following eMudhra certificate compromise
Azul has issued an out-of-cycle security update after the compromise of eight eMudhra intermediate Certificate Authority (CA) certificates, publicly disclosed on 20 October 2026. The…
The AI notetaker risk is now an everywhere problem
The businesspeople adopting AI notetakers are not being reckless. They are responding to a real business need. Our teams are in meetings all day with…
Five ways to bolster security as cloud environments and budgets come under attack
Cloud adoption is soaring, attack surfaces are expanding dramatically, and security budgets are being squeezed. Security teams must urgently re-evaluate the cloud landscape in 2023,…
How do you plan for AI system failure?
Your AI initiative gets the green light. But now all the parameters and guardrails you built into your plan need to be executed. Who owns…
LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project’s PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. The supply-chain attack…
Hackers Exploit Critical Citrix NetScaler RCE Flaw to Deploy Web Shells and Malware
A critical flaw in Citrix NetScaler ADC and NetScaler Gateway is being used to run commands on exposed appliances, install web shells and deliver malware.…
DOQEX Achieves Cyber Essentials Certification to Strengthen Security Standards
UK-based secure data exchange specialist DOQEX has achieved Cyber Essentials certification, adding another recognised security standard to its existing portfolio of accreditations. The York-based company,…