In the time it takes Washington to schedule an interagency meeting, an adversary can frame an incident for half the world. That is the central problem of cognitive warfare. Meaning now hardens...
Less than a week after the White House released President Trump’s new national cyber strategy, National Cyber Director Sean Cairncross used a Cyber Focus interview to make the administration’s...
The Department of Defense (DOD) established the Cybersecurity Maturity Model Certification (CMMC) program in 2020 to ensure that defense industrial base (DIB) companies comply with cybersecurity...
In an unprecedented series of attacks, Iran has targeted commercial data centers in Gulf countries in the context of the armed conflict initiated by the United States and Israel on Feb. 28. On...
Cyber deterrence has long lagged behind the threat. In this special episode of Cyber Focus recorded on March 11, 2026, White House National Cyber Director Sean Cairncross argues that the United...
Cybersecurity researchers have disclosed multiple security vulnerabilities within the Linux kernel's AppArmor module that could be exploited by unprivileged users to circumvent kernel protections,...
U.S. and allied militaries have turned to fighter jets in their struggle to ward off Iran’s cheap, plentiful drones, but former pilots say the mission is expensive, dangerous, and, ultimately,...
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these...
Google Chrome security advisory (AV26-235)
Poland's National Centre for Nuclear Research (NCBJ) says hackers targeted its IT infrastructure, but the attack was detected and blocked before causing any impact. [...]
Ransomware negotiator charged with aiding BlackCat, actors exploit FortiGate firewalls to breach networks, and Iran hacktivists wipe Stryker systems.
This post will look at the past 20 years of cloud security research, separating the two decades into eras with important milestones defined that resulted in the change of one era to the next.
Microsoft is investigating several issues causing email synchronization and connection problems when using the classic Outlook desktop client. [...]
Operation Synergia's third season is the most productive to date Ninety-four people were arrested as part of a global, multi-month cybercrime crackdown, Interpol revealed today.…
Take your YOLO and box it up exclusive NanoClaw, an open source agent platform, can now run inside Docker Sandboxes, furthering the project's commitment to security.…
Skia graphics lib and V8 JavaScript engine brings browser's tally of actively exploited bugs to three in 2026 Google has pushed out an emergency Chrome update to fix two previously unknown...
Contents Introduction Key Targets Industries Affected Geographical focus Geopolitical Context Infection Chain Timeline of Activity Initial Findings Looking into the Decoy Documents Technical...
In 2025, Google, Amazon, Microsoft and Meta collectively spent US$380 billion on building artificial-intelligence tools. That number is expected to surge still higher this year, to $650 billion,...
A court-authorized international law enforcement operation has dismantled a criminal proxy service named SocksEscort that enslaved thousands of residential routers worldwide into a botnet for...
This week’s The Cyber Express weekly roundup highlights major cybersecurity developments affecting organizations, governments, and individuals worldwide. Key stories include destructive...
From Encryption to Real-World Attack Prevention In today’s hyper-connected digital environment, secure communication is not just about encrypting data—it is about preventing attackers from abusing...
An important Veeam security patch to address multiple vulnerabilities in its Backup & Replication platform that potentially allowed attackers to execute malicious code remotely, has been released....
Hypervisor migrations can introduce hidden risks that threaten data availability and recovery. Acronis explains why verified backups and cross-platform recovery are essential during VMware...
Guinea pigs, fictitious signatures, and the future of security in an AI-driven world
ESET’s Jake Moore used smart glasses, deepfakes and face swaps to ‘hack’ widely-used facial recognition systems – and he'll demo it all at RSAC 2026
Veeam has released security updates to address multiple critical vulnerabilities in its Backup & Replication software that, if successfully exploited, could result in remote code execution. The...
An international law enforcement action codenamed "Operation Synergia III" has sinkholed tens of thousands of IP addresses and seized servers linked to cybercrime operations worldwide. [...]
A threat actor tracked as Storm-2561 is distributing fake enterprise VPN clients from Ivanti, Cisco, and Fortinet to steal VPN credentials from unsuspecting users. [...]
Rising tensions in the Middle East are prompting fresh warnings that the conflict could spill into the cyber... The post ISAC advisory highlights cyber and physical risks to critical...
A suspected Iran-linked cyberattack has disrupted global systems at medical technology giant Stryker Corp., knocking some internal services... The post Suspected Iran-linked cyberattack hits...