News
How to Cut MTTR by 21 Minutes Per Case: An Action Plan for CISOs
5+ day, 10+ hour ago (480+ words) Unnecessary escalations cost time, focus and confidence. Add a week of noisy alerts and MTTR starts to climb in a way that's hard to explain in a report, and even harder to fix with "work faster" pressure." Top CISOs are…...
New FlexibleFerret Malware Chain Targets macOS With Go Backdoor
3+ mon, 4+ week ago (306+ words) A new macOS malware chain that uses staged scripts, credential-harvesting decoys and a persistent Go-based backdoor has been observed to bypass user safeguards, disguise its activity and maintain long-term access to compromised systems. According to a new advisory from Jamf…...
Chrome Enterprise: How to Protect the Enterprise Browser Frontier
4+ mon, 4+ week ago (1518+ words) However, the browser is now also a target for threat actors. Despite this, cybersecurity tools in many organizations have failed to properly evolve to meet this threat, with the primary focus still around endpoint security. Infosecurity spoke to Dean Paterek,…...
Trivy Supply Chain Attack Expands With New Compromised Docker Images
1+ hour, 1+ min ago (400+ words) A new set of compromised Docker images linked to the Trivy supply chain attack has been identified, expanding the impact of the incident across developer environments and CI/CD pipelines. Since, security researchers from Socket have found that additional malicious…...
CISA Orders US Government to Patch Maximum Severity Cisco Flaw
2+ hour, 51+ min ago (525+ words) The US Cybersecurity and Infrastructure Security Agency (CISA) has told all federal civilian agencies to patch a critical remote code execution (RCE) vulnerability in a Cisco firewall product, as ransomware actors circle. CVE-2026-20131 affects the web-based management interface of Cisco…...
Infosecurity Europe Announces 2026 Keynote Line Up
1+ week, 5+ day ago (210+ words) Infosecurity Europe has unveiled a major line-up of keynote speakers for its 2026 conference program, bringing together prominent figures from the military, global cybersecurity, elite sport and intelligence communities. The event will run from 24 June at ExCeL London. Tuesday's keynote program…...
Hackers Exploit Critical Langflow Bug in Just 20 Hours
3+ day, 16+ hour ago (327+ words) Threat actors have demonstrated just how quickly they operate today after exploiting a critical open source vulnerability within 20 hours, working only from the advisory description. The bug, CVE-2026-33017, is an unauthenticated remote code execution (RCE) vulnerability in Langflow " an open-source…...
AWS Warns Hackers Have Abused Cisco Firewall Zero-Day Since January
4+ day, 10+ hour ago (359+ words) A prolific ransomware group has been exploiting a zero-day vulnerability in a Cisco firewall product since January, according to a new analysis from AWS. AWS CISO, CJ Moses, warned yesterday that the Interlock operation had been using CVE-2026-20131 in attacks…...
The Cloud Risk Nobody Talks About: Why Resilience‑Focused Cloud Design
4+ day, 12+ hour ago (154+ words) For more information explaining how we use your information please see our privacy'policy. By registering you agree with our terms'and'conditions. Organizations are accelerating cloud adoption, but many overlook a critical truth: the cloud can strengthen your security posture or quietly…...
New Ubuntu Flaw Enables Local Attackers to Gain Root Access
5+ day, 4+ hour ago (345+ words) A newly identified local privilege escalation (LPE) vulnerability has been discovered affecting default installations of Ubuntu Desktop 24.04 and later, allowing attackers to gain full root access. The flaw, tracked as CVE-2026-3888, stems from the interaction between two core system components…...