dripping honey effect

Qilin and INC Ransomware Exploit PAN-OS Flaw Palo Alto Patched in May

Discovered and subsequently patched in May of this year, CVE-2026-0257 is an authentication bypass in Palo Alto Networks’ PAN-OS software. The flaw enables bad actors to establish unauthorized VPN connections that bypass multi-factor authentication (MFA) steps. Palo Alto Networks’ Unit 42 research team published knowledge…

Connectwise Microsoft 365 https://pixabay.com/illustrations/ai-generated-computer-cloud-data-8988757/
One Stolen ConnectWise Credential Reached Nearly 1,000 Microsoft 365 Tenants
November 11, 2026
ConnectWise Cloud Backup (formerly SkyKick) recently experienced a security incident that is having ongoing impacts, with the company’s initial advisory published on October 16th and the most recent update posted on October 30th. This malicious…
Read More >
banks fake AI agents https://www.pexels.com/photo/3d-render-graphics-12939554/
Fake AI Agents Hit 48% of Sites as Banks Restrict Real Ones to Read Only
November 10, 2026
Threat research and intelligence channels are warning of attackers posing as AI agents in credential theft attacks. Cequence has published research following a single threat actor, a scanner rotating through about 32 AI bot identities.…
Read More >
Microsoft .NET vulnerabilities https://www.pexels.com/photo/a-company-logo-on-a-wall-10142683/
Microsoft Issues Emergency .NET Updates After Earlier Fixes Fell Short
November 09, 2026
Microsoft released emergency security updates for .NET on October 25 to address two newly disclosed vulnerabilities and two flaws that its October 13 patches failed to fully resolve, potentially leaving some systems exposed despite earlier…
Read More >
GMO ransomware https://www.pexels.com/photo/yellow-and-black-caution-sign-4447137/
GMO Internet Attack Triggers PC Shutdown Warning and $50M Ransom Demand
November 06, 2026
Japanese internet services provider GMO Internet urged customers to back up their data and shut down their computers on Oct. 27 after attackers threatened to deploy ransomware and publish stolen information. The warning followed an…
Read More >
critical flaws unpatched https://www.pexels.com/photo/broken-metal-fence-3969518/
66 Percent of Billion Dollar Firms Knowingly Leave Critical Flaws Unpatched
November 05, 2026
Chainguard recently released “The AI Exploit Gap,” a report exploring the space between operations and processes accelerated by the growing employment of AI and the much slower human pace of remediation. The report surveys 1,300…
Read More >
OpenCode keys https://www.pexels.com/photo/assorted-keys-laid-on-a-surface-7630510/
Stolen OpenCode Keys Turned Paying Developers Into Distillation Proxies
November 04, 2026
On October 17th, OpenCode disclosed on its X account that a breach had occurred the previous night, affecting 1.4% of OpenCode Console users. Developers were first tipped off to the attack by bills popping up…
Read More >
Anthropic self-replicating AI https://www.pexels.com/photo/pattern-from-colorful-pawns-6990337/
Anthropic AI Models May Self-Replicate by End of Year
November 02, 2026
Anthropic recently conducted an internal study during which security specialists stress-tested small open-weight AI models. The team discovered these models can already handle most of the steps to copy themselves onto unfamiliar hardware and run…
Read More >
refrigeration vulnerability AI attack https://www.pexels.com/photo/stocked-refrigerator-with-beverages-and-snacks-29409104/
AI Finds Refrigeration Flaws in Hours as Known Vulnerabilities Leave Supermarkets Exposed
October 30, 2026
Hackers took control of refrigeration systems at hundreds of French supermarkets overnight on Oct. 11, turning refrigerators and freezers into heaters. Temperatures in some units climbed as high as 122 degrees Fahrenheit (50 degrees Celsius),…
Read More >
Mimosa Android malware https://www.pexels.com/photo/black-android-smartphone-833337/
Preinstalled Midnight Mimosa Malware Found on Android Phones in 150+ Countries
October 29, 2026
Researchers at Bitdefender have discovered a malware campaign, identified as Midnight Mimosa, in which malware is embedded within the firmware of low-cost Android phones. Affecting thousands of devices across more than 150 countries, this campaign…
Read More >
Industry News
View More
Proofpoint Varonis acquisition https://www.pexels.com/photo/close-up-shot-of-a-handshake-5313361/
Proofpoint Buys Varonis for $6.3B to Watch What AI Agents Touch
November 04, 2026
Enterprise cybersecurity leader Proofpoint recently announced an agreement to purchase data and AI security platform Varonis. The acquisition is an all-cash deal valued at $6.3 billion, or $49.75 per share, an increase of 52% over…
Read More >
CyberFOX Optimize365 Microsoft 365 security https://www.pexels.com/photo/person-wearing-round-gold-colored-watch-using-black-tablet-computer-with-blue-detachable-keyboard-on-round-white-wooden-table-1181206/
CyberFOX Adds Microsoft 365 Security With Second Acquisition in Four Months
October 21, 2026
Global cybersecurity software provider CyberFOX recently announced the acquisition of Microsoft 365 security provider Optimize365. This deal follows the company’s June purchase of SASE provider Timus Networks, and both acquisitions are funded on the back…
Read More >
Socure Fravity identity fraud https://www.pexels.com/photo/the-word-fraud-spelled-out-in-scrabble-letters-19835552/
Socure Raises $156M at $5.2B Valuation, Buys Fravity to Fight AI Fraud
September 28, 2026
Trust infrastructure provider Socure recently announced a strategic growth investment round valuing the company at $5.2 billion, raising $156 million. The investors were led by Summit Partners and also included Goldman Sachs Alternatives, Wells Fargo,…
Read More >
Palo Alto Console AI SOC https://www.pexels.com/photo/abstract-geometric-cubes-in-futuristic-design-39501489/
Palo Alto Networks Buys Console to Automate Security Operations
September 27, 2026
For years now, alert volumes have consistently outpaced the capacity of human analysts to address and remediate every flagged issue. Traditional security operations center (SOC) workflows are built around dashboards, queues, and manual triage, often…
Read More >
Surfshark Optery data https://www.pexels.com/photo/crop-cyber-spy-hacking-system-while-typing-on-laptop-5935794/
Surfshark Acquires Data Removal Firm Optery in Second US Deal
September 15, 2026
Personal and private information has circulated since the advent of the internet and has been increasingly surfacing in recent years through search engines, broker databases, and AI summaries. Data brokers buy and sell this information,…
Read More >
Fortinet Virtue AI https://www.pexels.com/photo/abstract-digital-blocks-with-led-light-effects-30547616/
Fortinet Acquires Virtue AI to Secure Autonomous Agents at Runtime
August 28, 2026
In recent years, the explosive growth of artificial intelligence (AI) tools and agents has reshaped the digital landscape and brought on many new and evolving risks. The deployment of autonomous AI agents in business environments…
Read More >
Okta Permiso identity https://www.pexels.com/photo/chain-link-fence-closed-with-lock-in-countryside-5688464/
Okta Buys Permiso for $200 Million to Police AI Agents After Login
August 18, 2026
Identity and access management (IAM) company Okta recently signed a definitive agreement to acquire Permiso Security, with the deal expected to close in Q3 of Okta’s 2027 fiscal year. While the exact terms of the…
Read More >
CrowdStrike SGNL continuous identity security AI
Cyera Adds Oasis Security for $1B to Close the AI Agent Identity Gap
August 11, 2026
The ongoing AI explosion and recent growth of agentic AI usage have created a security landscape with new and evolving risks. Enterprises are deploying AI agents within their networks at a rapid pace, outstripping any…
Read More >
Palo Alto Embrace observability https://www.pexels.com/photo/black-binocular-facing-lighted-city-at-nighttime-827190/
Palo Alto Networks Buys Its Way Into Watching Everything
August 02, 2026
On July 21st, 2026, Palo Alto Networks announced its intent to acquire user-focused observability provider Embrace under undisclosed terms. The deal adds Real User Monitoring (RUM) functionality to the company’s existing Observability platform. The acquisition…
Read More >
Subscribe for the Latest News
Webinars
You Are Securing AI. Can You Prove Your AI Is Secure?
Register Now
Turn EU Cyber Resilience Act Compliance Into Operational Advantage
Register Now
You Are Securing AI. Can You Prove Your AI Is Secure?
Register Now