dripping honey effect
Cybersecurity News
View More
permissions least privilege access report
Why Enterprise Permissions Are AI's Most Dangerous Inheritance
April 08, 2026
Broken access control has led the OWASP Top 10 for six straight years, affecting 100% of tested applications in 2025. However, nobody had ever measured actual permission usage in production to answer the question of…
Read More >
Ubuntu Qualys privilege escalation
Ubuntu Patches Snap Flaw That Could Let Local Users Gain Root
April 07, 2026
Ubuntu has patched a local privilege-escalation flaw tied to Snap that could let an unprivileged local user gain root access on affected systems. Qualys disclosed the vulnerability this month, saying it stems from the interaction…
Read More >
manufacturing identity security
How Manufacturing's Identity Crisis Is Turning Access Gaps Into Attack Vectors
April 06, 2026
One of the main competitive advantages of the manufacturing sector, provided by rapid scaling, seasonal agility, and third-party integration, is also its identity security liability. In manufacturing environments, access is provisioned at operational speed, and…
Read More >
Sysdig Langflow AI
AI Pipeline Code Flaw Exposes Patch Cycle Times
April 03, 2026
The cybersecurity community has long operated under an implicit assumption: When security alert organizations disclose a vulnerability, defenders have at least a few days—perhaps weeks—to assess, test, and deploy a patch before attackers catch up.…
Read More >
Solen Feyissa ZQvPAtGxQh0 Unsplash
Researchers Say Claude Flaws Could Be Chained to Silently Exfiltrate User Data
April 01, 2026
Researchers at Oasis Security say they found a three-part exploit chain involving Claude features and related claude.com infrastructure that could silently extract sensitive data from a user’s conversation history. The attack abused trusted platform features…
Read More >
AWS Bedrock DNS
How a Single DNS Loophole Exposes AI Agents to Command-and-Control Attacks
March 31, 2026
The Amazon Web Services (AWS) Bedrock AgentCore Code Interpreter is a managed service enabling AI agents to execute Python code dynamically and securely within a managed cloud environment. The service’s sandbox mode was positioned by…
Read More >
mobile banking fraud Zimperium
The Bank in Your Pocket Is Now the Front Door for Fraud
March 30, 2026
Traditional defenses against fraud have been designed for traditional kinds of threats, prioritizing hardened servers, network perimeters, and layered authentication to defend against the attacks that were prevalent at the time. These measures are increasingly…
Read More >
code-signing extended validation certificates
Signed And Trusted But Still Dangerous
March 24, 2026
Microsoft Defender Experts recently found a series of phishing campaigns abusing legitimate signatures to deceive targets. Identified in February 2026, the phishing lures consisted of crafted meeting invitations and PDF attachments leading to false pages…
Read More >
Salesforce ShinyHunters
Cybercrime Group Targets Salesforce Misconfigurations
March 23, 2026
A renewed cyberattack campaign on Salesforce by the cybercrime group ShinyHunters highlights a key consideration for security teams. Simple configuration mistakes can expose enterprise data—at scale. As this recent campaign unfolded, Salesforce warned customers about…
Read More >
Industry News
View More
OpenAI Promptfoo
OpenAI Bets on AI Security With Promptfoo Acquisition
March 26, 2026
The AI explosion of the past several years, marked by the booming popularity of generative AI for personal and professional functions, has been largely focused on ensuring performance and quality of these tools. Agentic AI…
Read More >
Booz Allen Defy Security
Booz Allen’s Cybersecurity Pivot Signals a New Battle for the Enterprise Security Market
March 22, 2026
Booz Allen Hamilton is a company with over 100 years of history, today known primarily for specialization in digital transformation and artificial intelligence services. The company has a legacy in government consulting and national security,…
Read More >
Arctic Wolf Sevco
Arctic Wolf Expands Beyond MDR with Sevco Deal to Tackle the Exposure Management Gap
March 13, 2026
Cybersecurity vendor Arctic Wolf has a foundation in managed detection and response (MDR), offering solutions, expertise, and resources for security coverage at scale. In recent years, there has been a mounting market pressure to move…
Read More >
Pexels Pavel Danilyuk 5520322
Proofpoint Bets on the Agentic Future with Acuvity Acquisition
March 08, 2026
On February 12, 2026, cybersecurity and compliance leader Proofpoint announced the acquisition of AI security and governance firm Acuvity. This deal is a significant step in securing the agentic workspace, an increasingly common enterprise environment…
Read More >
Zscaler SquareX zero-trust
Zscaler’s SquareX Acquisition Signals a New Era in Zero Trust Cybersecurity
February 20, 2026
In the traditional castle-and-moat model of security, legacy Virtual Private Networks (VPNs) act as “digital drawbridges,” a measure that is no longer effective in protecting a castle without walls like the modern distributed enterprise. As…
Read More >
LevelBlue Fortra Alert Logic MDR
LevelBlue Bets Big on MDR as MSSPs Consolidate for Scale
February 10, 2026
Managed detection and response (MDR), once an optional add-on service to comprehensively handle threat hunting and mitigation, has evolved into a core operating layer for managed security service providers (MSSPs). With advanced threats and sprawling…
Read More >
CrowdStrike SGNL continuous identity security AI
CrowdStrike and the Shift to Continuous Identity in the AI Era
January 26, 2026
In the face of modern threats, identity has quietly become the primary attack surface for threat actors to target. Rather than needing to rely on high-skill hacking and exploits, the fastest way for an attacker…
Read More >
ServiceNow Armis cyber exposure management OT
ServiceNow Bets Big on Cyber Exposure as the Control Plane for Modern Security
January 05, 2026
The ServiceNow $7.75 billion acquisition of Armis, announced on December 23rd, redefines where cybersecurity decision-making now lives. As enterprises struggle to secure sprawling attack surfaces across IT, OT, cloud, and medical devices, the deal positions…
Read More >
ServiceNow Veza acquisition identity security
ServiceNow’s Veza Acquisition Signals the Next Phase of Identity-First Security
December 16, 2025
Cloud software company ServiceNow recently announced an agreement to acquire identity security startup Veza. Identity governance now sits at the heart of cybersecurity strategy, leading companies to make deals like this that combine the capabilities…
Read More >
Subscribe for the Latest News
Webinars
The Future of CNAPP: Operationalizing Cloud Security in 2026
Register Now
The Resilience Roadmap: How to Defeat the Modern Attack Lifecycle
Register Now
The Future of CNAPP: Operationalizing Cloud Security in 2026
Register Now