Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind.
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.
More than 730 cyber breaches affected over 270 million Americans last year, costing an average of $10 million per breach.
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
– AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here’s a proposal to make that the default.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
Register
SecurityWeek’s ICS Cybersecurity Conference celebrates its 25th anniversary in Nashville. Join the largest and longest-running event series focused on industrial cybersecurity.
[October 6-8, 2026 | In-Person]
SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[October 14, 2026 | Virtual]
The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 11, 2026]
SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[Originally August 19, 2026]
-
Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP). (October 5, 2026)
-
CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. (October 5, 2026)
-
Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched. (October 5, 2026)
-
The bugs could lead to authentication bypass, shell command execution, and memory corruption. (October 3, 2026)
-
The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees. (October 6, 2026)
-
An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since March 2026. (October 6, 2026)
-
Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group. (October 5, 2026)
-
Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account. (October 2, 2026)
