Critical Infrastructure SecurityUS warns of Iran-linked attacks on critical infrastructureSteve ZurierJuly 24, 2026Iran-linked hackers target Siemens, Schneider, Rockwell OT.
Application securityAI is overwhelming patch management. Here’s how teams adaptSteve ZurierJuly 23, 2026AI is overwhelming patch teams, forcing a shift to smarter, automated remediation.
IdentitySharePoint vulnerability steals machine keys; fourth recent exploitSteve ZurierJuly 22, 2026New SharePoint flaw exploited as attackers steal machine keys for lasting access.
RansomwareQilin exploits Palo Alto Networks GlobalProtect VPN firewallsSteve ZurierJuly 21, 2026Qilin exploited a patched Palo Alto VPN flaw, highlighting the cost of delayed patching.
Cloud SecurityCritical ServiceNow AI flaw exploited days after patch releaseSteve ZurierJuly 20, 2026Attackers exploit critical ServiceNow AI bug just days after security patch release.
RansomwareStolen identities cause 79% of ransomware attacks, says Sophos reportSteve ZurierJuly 17, 2026Identity failures replace software flaws as ransomware's top access vector.
RansomwareAttackers execute a complete ransomware operation in under 24 hoursSteve ZurierJuly 16, 2026Spirals ransomware encrypted a victim in under 24 hours, underscoring the need for rapid containment.
Vulnerability ManagementCISA warns that three SharePoint Server bugs are actively exploitedSteve ZurierJuly 15, 2026Federal agencies given to July 17 to make the patches.
IdentityOAuth client ID spoofing silently validates stolen Microsoft Entra ID credentialsSteve ZurierJuly 14, 2026Attackers run multiple spoofing campaigns to confirm credentials.
Critical Infrastructure SecurityRussia’s FSB attacks critical infrastructure, says 12 Western nationsSteve ZurierJuly 13, 2026Russian hackers target outdated Cisco routers in decade-long espionage campaign.
