Zero Trust Model Still Holds Firm Against AI-Assisted Attacks, Says Creator In a significant boost to cybersecurity professionals around the world, John Kindervag, the creator of the zero trust model, has published a new book that asserts his 15-year-old security principle remains effective against modern AI-assisted threats. However, Kindervag’s assertion is not without caveats – … Read more
A Chinese Ransomware Group Targets Large Organizations in Spain and Portugal In a brazen cyberattack campaign, the Warlock ransomware group has been extorting large and critical organizations in the Spanish- and Portuguese-speaking world. The group, which has been tracked by Symantec as “Longlegs” and Microsoft as “Storm-2603,” has been exploiting Microsoft technologies to gain access … Read more
Microsoft’s 2026 Digital Defense Report paints a stark picture of the current state of cybersecurity: threat actors are rapidly gaining an upper hand in the use of artificial intelligence (AI), exploiting vulnerabilities, developing malware, and executing post-compromise activities at speeds that leave defenders struggling to keep pace. According to Microsoft, this advantage is not only … Read more
Cybersecurity threats have reached an alarming level, with a recent wave of attacks leveraging AI-powered zero-day exploits and exploiting vulnerabilities in commonly used software. In this article, we’ll delve into a series of disturbing stories that highlight the importance of proactive security measures in preventing catastrophic breaches. At its core, these attacks rely on a … Read more
A 16-year-old suspect has been arrested by police for allegedly running the notorious KillSec hacking group, in a major blow to the cybercrime underworld. The arrest comes after authorities seized the group’s ransomware leak site and servers, which had been used to extort millions from unsuspecting victims. The case highlights the increasingly complex threat landscape … Read more
A Major Boost for Enterprise IT: Microsoft Enforces Windows Settings Backup by Default In a move aimed at minimizing disruption to enterprise operations, Microsoft has announced that Windows settings backup and restore is now enabled by default on eligible devices running Windows 11 26H2. This change affects organizations that have joined or are hybrid-joined with … Read more
Kiteworks, a leading provider of secure file-sharing solutions to thousands of global corporations and government agencies, has released critical security patches to address 126 vulnerabilities, including a maximum-severity code injection flaw that could allow remote attackers to take control of its Email Protection Gateway (EPG) appliances. The vulnerability, tracked as CVE-2026-54154, affects all versions of … Read more
Zero Trust Architecture’s Achilles’ Heel: Human Error and Identity Verification Gaps A disturbing trend has emerged in the world of cybersecurity: even organizations with robust Zero Trust architectures are vulnerable to attacks that exploit human error during the onboarding process. Specifically, attackers are targeting identity verification weaknesses, often using stolen or fabricated identities to gain … Read more
A recent string of high-profile breaches has highlighted a disturbing trend in identity exposure. It appears that hackers are increasingly using stolen credentials and sensitive information to create complex attack chains, targeting multiple vulnerabilities within an organization’s defenses. This emerging threat vector is particularly concerning due to its ability to persist across domains and evade … Read more
A 16-year-old individual, suspected of being behind the notorious KillSec ransomware operation, has been apprehended by law enforcement officials. The arrest marks a significant blow to the cybercrime group’s activities and brings an end to the reign of terror inflicted on its unsuspecting victims. The youngster, whose identity remains undisclosed due to their age, is … Read more