A summary of the announcements made by vendors in the days leading up to the RSAC 2026 Conference.
The latest M-Trends report is based on insights from over 500,000 hours of Mandiant incident response investigations in 2025.
Attack volumes are back to pre-disruption levels, and the adversary tactics have remained unchanged.
Applying SOC-level rigor to the rumors, politics, and ‘human intel’ can make or break a security team.
The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation.
SIM swap attacks exploit misplaced trust in phone numbers and human processes to bypass authentication controls and seize high-value accounts.
The goal isn’t about preventing every attack but about keeping the business running when attacks succeed.
Developers must view AI as a collaborator to be closely monitored, rather than an autonomous entity to be unleashed. Without such a mindset, crippling tech debt is inevitable.
SecurityWeek’s 2026 Ransomware Summit is a must-attend event for cybersecurity professionals as ransomware attacks continue to hit big-name victims across industries with ruthless efficiency.
[February 25, 2026 | Virtual]
SecurityWeek’s 2026 Supply Chain Security Summit is where top security experts unpack the complexity of modern software supply chain threats and proven strategies to mitigate risk.
[March 18, 2026 | Virtual]
SecurityWeek’s 2026 ICS Lockdown is an online extension of the ICS Cybersecurity Conference and will dive deep into the world of industrial cybersecurity to help those charged with protecting OT environments.
[April 29, 2026 | Virtual]
SecurityWeek’s 2026 Threat Detection & IR Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and more.
[May 20, 2026 | Virtual]
-
The flaws could allow attackers to access sensitive information, execute code, or cause unexpected behavior. (March 23, 2026)
-
CVE-2026-21992 can be used without authentication for remote code execution and it may have been exploited in the wild. (March 23, 2026)
-
The vulnerability is tracked as CVE-2025-32975 and it may have been exploited in attacks against the education sector. (March 21, 2026)
-
Because attacker-supplied flow data is used in public flows, the bug leads to unauthenticated remote code execution. (March 20, 2026)
-
The latest M-Trends report is based on insights from over 500,000 hours of Mandiant incident response investigations in 2025. (March 23, 2026)
-
Other noteworthy stories that might have slipped under the radar: vulnerabilities found in KVM devices, Claudy Day Claude vulnerabilities, The Gentlemen ransomware group. (March 20, 2026)
-
The men violated U.S. export controls laws by scheming to divert massive quantities of the high-performance servers assembled in the United States to China. (March 20, 2026)
-
The attacks started on February 27 and have targeted e-commerce platforms, global brands, and government services. (March 20, 2026)
