General cybersecurity news and analysis
The UK's National Cyber Security Centre warns that AI is about to expose decades of technical shortcuts, demanding a massive and urgent patching effort - and organisations must prepare to patch quickly, frequently, and at scale. Get ready for a surge in fixes as buried technical debt is brought to the surface.
Anthropic's Claude Security Model just got a major upgrade, now helping cybersecurity platforms detect and fix software flaws faster than ever. With its advanced capabilities, Claude Security provides detailed vulnerability explanations, confidence rankings, and even generates step-by-step patch instructions.
Get ready to experience the fastest Windows Run dialog yet! Microsoft's latest preview build introduces a modern, sleek update that retains the classic functionality while embracing Windows 11's fresh visual language.
Palo Alto Networks is taking a major leap in AI security with its acquisition of Portkey, a cutting-edge startup that offers an AI agent gateway to streamline and secure communications among autonomous agents. This move will enable centralized control and oversight, ensuring safer interactions between AI agents.
While CISA's new zero trust guidance for operational technology is a step in the right direction, it leaves critical questions unanswered - namely, who foots the bill and how do organizations actually implement it? The guidance gets high marks for technical thinking, but falls short on practical details like funding, timelines, and automation.
The stakes are high: with the average breach costing nearly $4.9 million, organizations can no longer afford to focus solely on detecting intrusions - they must also prioritize swift and reliable recovery to restore operations, data, and trust. Speed and assurance of restoration have become just as crucial as early detection in incident response.
A critical vulnerability, CVE-2026-41940, with a near-perfect severity score of 9.8, has been discovered in cPanel and WHM software, allowing hackers to bypass authentication and gain unauthorized access to your control panel. This flaw puts your online security at risk, so taking immediate action is crucial.
As AI systems become more autonomous, US agencies warn that they may behave unexpectedly, and organisations should prepare for this by prioritising resilience and risk containment. To stay safe, businesses should assume the unpredictable and plan deployments with caution.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
A shocking case reveals a glaring weakness in ransomware incident response: organizations often put blind trust in single negotiators, leaving them vulnerable to exploitation by attackers. This human error, not a technical bug, can turn a trusted role into a gateway for cybercriminals.
Criminal IP's integration with ThreatQ supercharges threat intelligence by delivering real-time exposure insights, empowering organizations to analyze and respond to threats faster and more effectively. Analysts can now access crucial IP intelligence directly within ThreatQ, streamlining investigations and threat validation.
Microsoft just dropped an optional update, KB5083631, to squash a bug that's been causing Remote Desktop security warnings to display incorrectly - a fix that's especially crucial for those using multiple monitors with different scaling settings. This targeted update is part of a larger release that includes 34 other changes to improve your Windows 11 experience.
Boost your organization's security with Claude Security, now in public beta, which scans codebases to detect and fix software vulnerabilities with just a few clicks. Say goodbye to tedious API integrations and custom agent builds - simply access the feature from the Claude.ai sidebar and start scanning today!
The managed security services market is booming, expected to surge from $38.31 billion to $69.16 billion by 2030, but MSPs are struggling to turn this growth into revenue, stuck in an "execution gap" between technical expertise and business-focused sales strategies. To bridge this gap, MSPs must shift their sales messaging from technical jargon to tangible business outcomes like risk reduction and compliance success.
Microsoft just made it easier for IT admins to manage Microsoft Store apps on Windows 11 devices - you can now dynamically remove preinstalled apps across your enterprise using a simple policy update. Just reference the Package Family Name (PFN) to uninstall any unwanted MSIX/APPX apps.
Boost your Windows 11 security and performance with the latest optional update, KB5083631, which introduces a more secure processing mode for batch files and other quality improvements. Get ahead of the curve by installing this preview update now and be ready for the next Patch Tuesday release.
The FCC is cracking down on telecom companies that aren't doing enough to stop robocalling and cyber threats, with Chair Brendan Carr slamming those who do the bare minimum to verify callers as complicit in illegal schemes. New rules aim to tighten verification and supply-chain security to protect US phone networks.
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
State CISOs are losing faith in their ability to protect sensitive data, with confidence plummeting to just 22% - a drastic drop from 48% in 2022 - as AI-driven threats intensify. This sharp decline in confidence extends beyond state governments, with 63% of CISOs also doubting the ability of local governments and public higher education institutions to safeguard public data.
The modern workforce has a new equation: humans and AI agents working together, facing the same dynamic threats and risks. This emerging reality demands a fresh approach to security, one that recalibrates risk and rethinks trust in a blended workforce.
Socket is supercharging its supply-chain visibility with the acquisition of Secure Annex, a cutting-edge extension security startup, to give developers unprecedented control across the entire software development life cycle. This strategic move combines Socket's expertise in application dependencies with Secure Annex's innovative approach to browser and IDE extensions.
Thomasz Szabo, the ringleader of a notorious swatting ring, has been sentenced to four years in prison for orchestrating a campaign of fake bomb threats and swatting calls that targeted high-profile figures, including members of Congress and federal law enforcement officials. Szabo's malicious scheme sent armed police to the doors of innocent victims, causing fear and chaos.
Imagine an AI agent that can uncover thousands of hidden security vulnerabilities, some of which have gone undetected for nearly 30 years - and the potential risks that come with it falling into the wrong hands. A single powerful AI agent can scan for weaknesses faster and more persistently than hundreds of human hackers, highlighting a pressing need for secure deployment.
A recent patch for Google's Gemini CLI has sparked disruptions in CI/CD pipelines, ironically caused by a critical infrastructural flaw - not an AI quirk - that allowed remote code execution due to over-permissive workspace trust in headless mode. The fix, while swift, may trip automated pipelines that relied on the old settings.
A newly discovered Linux flaw, nicknamed "Copy Fail," allows unprivileged users to gain root-level access to major distributions, putting countless systems at risk. This vulnerability, which involves a temporary write of just four bytes during a crypto operation, can be exploited by attackers to take full control of an operating system.
Beware: the latest Windows 11 update, KB5083769, is causing backup software to fail on systems running versions 24H2 and 25H2 by triggering Volume Shadow Copy Service (VSS) timeouts. This disruption can lead to frustrating backup failures, affecting users of popular software like Acronis.