What happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes.
Sovereign AI places responsibility for every layer of the security stack in the operator's hands, and this article examines the threats that accompany that shift alongside the practical controls that keep nationally owned AI systems trustworthy.
TrendAI™ Research's investigation of ICS protocols near U.S. data centers uncovered thousands of vulnerable devices controlling critical cooling, power, and environmental infrastructure. These systems—designed for operational efficiency, not security—were accessible from the public internet.
This final installment of our trilogy on Pwning Agentic AI covers defenses against the return-to-tool (RTT) attacks—read-only Postgres bypass, support-ticket ransomware, and KYC passport exfiltration—demonstrated in Part II. Here we take a look at what works and what doesn’t against this new class of attack.
The modern world relies heavily on industrial robots. But is the current robotics ecosystem secure enough to withstand a cyber attack?
This paper takes a look at Pawn Storm's operations within the last two years, and how the group has expanded their activities from espionage to the use of cyber propaganda tactics.
This week's recap highlights new distribution methods that make ransomware more unpredictable in terms of how they infect their victims.
A recently uncovered malware Brickerbot is making the rounds with the capability to permanently brick Internet of Things (IoT) devices. How can it be mitigated?
Hacking group Shadow Brokers recently leaked a new trove of information-stealing tools and exploits targeting Windows systems and servers. What does this mean for enterprises?
This Infosec Guide will tackle the primary threats organizations face when implementing BYOD programs, as well as best practices and solutions to mitigate these threats.
A global cyberespionage campaign has been uncovered compromising managed IT service providers, using them as in-betweens to attack their targets. Here’s what you need to know.
An in-depth analysis of Shodan data reveals how some of the biggest US cities fare in terms of exposed cyber assets, what this means in terms of security, and how home users and organizations can protect their data.
Despite being one of the oldest scams on the internet, phishing continues to be a significant problem for both individuals and organizations. Here are some methods to identify and deal with potential phishing attempts.
Past events show that attackers don't just target people, but processes as well. Enterprises should be aware of the of rising possibility of Business Process Compromises.
August 25th, 2026 
5 min read
