Enterprise Cyber Alert

Advantest only now notifies victims of PII theft—including SSNs, passports, medical and financial data—months after its February ransomware...

Experts at the ONE Conference 2026 urged energy and industrial firms to treat cybersecurity as a necessary opportunity worth €80-120 billion, not just...

Oracle Health/Cerner breach highlights post-acquisition security gaps and regulatory lags.

• Scale uncertainty: Texas AG data points to nearly 20...

Splunk disclosed a CVSS 9.8 critical vulnerability (CVE-2026-76268) allowing unauthenticated remote attackers full access via the Patroni REST API.

-...

Organizations and authorities must separate threatening communications from evidence of likely attack when prioritizing responses.

• Threat...

Rein Security's $25 million Series A, bringing total funding to $35 million, underscores growing enterprise need for runtime tools to monitor and...

Southern Company confirmed unauthorized access to ~400,000 customer accounts across Georgia Power, Alabama Power, and Mississippi Power. Exposed data...

EY's expanding breach confirms exposure of Goldman Sachs and Man Group clients across 6 data types, with ShinyHunters claiming credit and a...

• CVE-2026-104944 lets unauthenticated attackers crash the TDP daemon with one UDP packet (CVSS 7.1 High)
• Exposed IoT cameras face repeated...

A recent study using the UNSW-NB15 dataset found measurable differences between normal and attack traffic across features like byte counts, packet...

Enterprises can secure employee-owned Apple devices with privacy-preserving controls that separate personal and corporate data.

• User Enrollment in...

• Risk-based alerting combining severity, accumulation, and variety scores hits 0.92 performance vs 0.72 for static rules.
• AI SOC layers query...

A single online customer portal exposure at Southern Company compromised limited account data for roughly 400,000 customers across Georgia Power and...

Household payroll platforms like Poppins concentrate sensitive personal and employment data in one place, creating high-value targets for attackers.
-...

Enterprise security should separate managed WPA-Enterprise roaming from automatic joins to unknown or unencrypted networks, as the latter creates the...

Summer Iranian cyberattacks on water systems in 12 states exposed critical vulnerabilities across the sector. 80% of systems lack basic cyber hygiene,...

The Sheppard Mullin breach underscores how law firms act as concentrated repositories of highly sensitive client data spanning multiple industries....

Rapid7's new unified platform merges threat intelligence, vulnerability research, and Rapid7 Labs into a single engine that shifts enterprises from...

SGS's acquisition of Prescient Security marks a clear step toward integrating cybersecurity assurance, compliance certification, and enterprise risk...

AI-enabled threats and mobile-first workforces are expanding attack surfaces on smartphones and tablets as corporate endpoints, requiring continuous...