CMMC Final Rule: A Guide for DoD Subcontractors
“This isn’t just compliance…it’s a national security imperative.” Stacy Bostjanick Chief DIB Cybersecurity, DCIO(CS), OCIO The wait is over. On September 10, 2025, the Department…
Latest Cybersecurity News — Page 872
View all →
Microsoft Patch Tuesday March 2026 – 78 Vulnerabilities Fixed, Including One Zero-day
Microsoft released its March 2026 Patch Tuesday security update on March 10, 2026, addressing 78 vulnerabilities across Windows, Microsoft Office, Azure, SQL Server, and .NET.…
China-Linked Hackers Hit Qatar with Backdoor Disguised as War News
Check Point Research reveals that China-linked hackers, including the Camaro Dragon group, are targeting Qatar with malware disguised as Middle East conflict news. Using tools…
FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials
Ravie LakshmananMar 10, 2026Network Security / Vulnerability Cybersecurity researchers are calling attention to a new campaign where threat actors are abusing FortiGate Next-Generation Firewall (NGFW)…
COILED SPRINGS AND JELL-O | Daniel Miessler
I think I just figured out why things might be so bad in the United States and maybe elsewhere as well. And it really runs…
From Assumed Protection to Measurable Resilience
What is purple teaming? Purple teaming is often described as the collaboration between red teams and blue teams. That definition is accurate, but incomplete. At…
10 Critical Vulnerabilities Show 69% Drop from October
November 2025 saw a significant 69% decrease in high-impact vulnerabilities, with Recorded Future’s Insikt Group® identifying 10 vulnerabilities requiring immediate attention, down from 32 in…
Dispelling Ransomware Deployment Myths | Huntress
When a ransomware attack occurs, the focus is most often on the encryption of files. Initial access is often glossed over or simply assumed. In…
How Threats Use Geometry to Prove ‘Humanness’
By Sila Ozeren Hacioglu, Security Research Engineer at Picus Security. Splashy breaches are out. Attackers are increasingly abandoning loud, disruptive attacks in favor of long-term,…
OpenAI to Acquire Promptfoo to Address Vulnerabilities in AI Systems
OpenAI has announced the acquisition of Promptfoo, an artificial intelligence security platform designed to help enterprises identify and fix vulnerabilities in their AI systems during…
Attackers use AiTM phishing kit, typosquatted domains to hijack AWS accounts
Phishers are targeting AWS accounts holders with fake email security alerts and redirecting them to a high-fidelity clone of the AWS Management Console sign-in page,…
KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet
Cybersecurity researchers have discovered a new malware called KadNap that’s primarily targeting Asus routers to enlist them into a botnet for proxying malicious traffic. The…