Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Windows 11’s strongest security defenses can be bypassed without a screwdriver Researchers from the University of Birmingham and Durham University have fo… Continue reading Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs→

A hollowed out data layer is making CISOs fly blind into AI attacks

The security industry is currently transitioning to an era where both offense and defense are AI-led, and every SOC operates at machine speed. However, what most CISOs have not yet reckoned with is that the AI defenders they are about to deploy will in… Continue reading A hollowed out data layer is making CISOs fly blind into AI attacks→

Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: GitHub Dependabot malware alerts now cover eight ecosystems GitHub has flagged npm malware since March 2026. Anyone pulling in a bad PyPI, Maven, RubyGems… Continue reading Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day→

Four corporate investigation mistakes organizations make under pressure

In this Help Net Security video, Christine Gadsby, VP and Chief Security Advisor at BlackBerry, explains why corporate investigations go wrong before the forensic team arrives. The first hours matter more than leaders assume. Access gets granted, conve… Continue reading Four corporate investigation mistakes organizations make under pressure→

338 million attack simulations reveal the state of enterprise defense

First, a bit of good news: Enterprise defenses are recovering. However, it’s a narrow recovery, with a twist. Today, organizations are better at stopping loud attacks but have barely moved the needle at all against the quiet ones. This data, and a lot … Continue reading 338 million attack simulations reveal the state of enterprise defense→

Who will be the Stanislav Petrov in your organization?

The recent news coverage of “rogue AI” systems hacking innocent companies reminded me of one of the world’s most unsung heroes and genuinely someone who may well have saved the world. In 1983, the USSR’s early warning systems reported that the United S… Continue reading Who will be the Stanislav Petrov in your organization?→

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?

July 2026 Patch Tuesday was record-setting in so many ways. The sheer volume of security patches for almost every product in the Microsoft portfolio was the highest ever and, of course, well over 600 CVEs were identified in the Security Updates Guide. … Continue reading August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?→

Photos: Black Hat USA 2026, part two

Round two from Black Hat USA 2026. This set covers the parts of the show floor that did not make the first gallery. Scroll through below. Featured vendors: BlackCloak, Teleport, GitGuardian, Oak, Hexnode, Picus Security, Featured speaker: Kate Silverst… Continue reading Photos: Black Hat USA 2026, part two→

Photos: Black Hat USA 2026

Photo gallery from the Business Hall at Black Hat USA 2026. Interesting booths, demo stages, crowded aisles, and the moments in between. Featured vendors: Stellar Cyber, Tines, Filigran, Delinea, Prophet AI, Air Security, Legion Security. Featured peop… Continue reading Photos: Black Hat USA 2026→