Security Bulletin

The attack chain begins with a phishing lure disguised as an invoice, utilizing attacker-controlled content hosted on legitimate QQ and Tencent Cloud services.

The Action1 2026 Survey Report highlights significant gaps between 2024 predictions and 2026 reality for AI adoption in IT workflows.

Brinks Home identified the attack on July 20, though the ShinyHunters extortion gang claimed the breach occurred on July 13.

The NCSC highlights that network devices like firewalls and VPN gateways are increasingly targeted by attackers.

A likely Iran-backed actor targeted more than 30 community water systems in Minnesota in a sobering reminder of rising threats to US critical infrastructure.

A myriad of software makes up the typical AI harness, and trust issues between the components can create concerning attack vectors.

Certification rubber-stamping is the most common form of governance decay.

Can the platform make the gap between what the organization claims and what the evidence supports visible before the response is sent?

CISOs urge resilience, supply chain security and simpler cyber rules.

Attackers continue to leverage AI to target our edge appliances – so why hasn’t the industry built-in AI into those devices yet?

In the cloud-based enterprise, Linux servers can't stay isolated on legacy authentication systems.

The AI Capability Verification Matrix will help test claims critical to the purchase decision