CISO Conversations
Cardwell started her career at Netscape, become a VP of engineering at American Express, CISO at UnitedHealth Group, and now CISO in Residence at...
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Data Breaches
The cybercriminals have leaked more than 300GB of files allegedly stolen from the tire giant.
Endpoint Security
The malware disables antivirus and EDR protections at the kernel level, clearing the path for credential harvesting, system reconnaissance, and eventual data exfiltration.
Vulnerabilities
Microsoft has fixed a critical vulnerability, but none of the flaws fixed this Patch Tuesday has been exploited in the wild.
Cybercrime
Salesforce has confirmed that customers are being targeted via poorly secured instances.
Vulnerabilities
CISA has added the high-severity authentication bypass vulnerability to its KEV list, along with SolarWinds and Workspace One bugs.
Phishing
Abusing DNS record management controls, the threat actor hides the location of malicious content via Cloudflare.
Vulnerabilities
WatchTowr reports seeing exploitation attempts for CVE-2026-20127 from numerous unique IP addresses.
Cyberwarfare
Trump’s Cyber Strategy calls for stronger deterrence against cyber adversaries, modernization of federal networks, protection of critical infrastructure, and investment in technologies such as...
Data Breaches
The bureau is working to determine the scope and impact of the problem, according to a notification sent to members of Congress.
ICS/OT
The vulnerability was disclosed and mitigated in 2021 but its in-the-wild exploitation has only now come to light.
Nation-State
The attacks, observed since February, show that Iranian hackers already have a presence in the networks of US organizations.
Vulnerabilities
Less than half of the total zero-days have been attributed to a threat actor, but spyware vendors and China are in the lead.
Cybercrime
The stolen credential marketplace had been active since 2021 and in late 2025 it counted 142,000 users.
Mobile & Wireless
Google and iVerify analysis reveals a powerful exploit kit originally used by Russian state actors that is now appearing in broader criminal campaigns.
Endpoint Security
Starting September 2026, new Chrome iterations will be released twice as fast, part of a two-week cycle.
ICS/OT
The researcher says he has identified thousands of internet-exposed IQ4 building management controllers.
Mobile & Wireless
Researchers have uncovered a Wi-Fi vulnerability that allows nearby attackers to intercept sensitive data and execute machine-in-the-middle attacks against connected devices.
Cyberwarfare
The cybersecurity industry is monitoring the landscape and says many of the big claims made by hacktivist groups remain unverified.
IoT Security
Using low-cost receivers deployed along roads, academic researchers tracked drivers and their movement patterns.
Data Protection
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities
