Wednesday, October 21, 2026

Cybersecurity News Hero

Combing the world for the cybersecurity stories you need to know.

Cybersecurity News

PhantomRPC Microsoft https://www.pexels.com/photo/crop-cyber-spy-hacking-system-while-typing-on-laptop-5935794/

Why PhantomRPC Is a Flaw That Cannot Be Patched Away

The Remote Procedure Call (RPC) mechanism of the Interprocess Communication (IPC) ecosystem is the universal communication backbone of Windows systems, embedded so deeply in the OS that its failure modes become everyone's problem. A recent…

taxes phishing IRS https://www.pexels.com/photo/close-up-shot-of-a-document-through-a-magnifying-glass-7821673/

Tax Phishing Is Moving From Personal Inboxes to the Workplace

Tax phishing has long been easy to dismiss as a seasonal consumer scam: fake IRS emails, refund bait, audit threats, and other lures aimed at people anxious about filing deadlines. New research from Hoxhunt suggests…

AI security Unit 42 Zealot PoC https://www.pexels.com/photo/abstract-digital-circuit-block-graphic-art-30547567/

What Zealot Reveals About AI's Cloud Offensive Capabilities

A disclosure from AI giant Anthropic in November 2025 confirmed that AI autonomously executed between 80% and 90% of a particular state-sponsored espionage campaign, effectively shifting the debate from hypothetical to a documented reality. Unit…

Sysdig cloud security https://pixabay.com/illustrations/cloud-computer-circuit-board-cpu-6532831/

How the Cloud Security Reckoning Is Reshaping Defense

Cloud security company Sysdig recently published the 2026 Cloud-Native Security and Usage Report, detailing trends and needs in modern cloud operations and security. The report shows that cloud environments have scaled past what human-driven security…

Okta vishing LevelBlue https://www.pexels.com/photo/gold-condenser-microphone-near-laptop-computer-755416/

Okta Vishing Attacks Put Identity Help Desks in the Crosshairs

A new report from LevelBlue’s SpiderLabs team warns that threat actors are increasingly using voice phishing, or vishing, to manipulate Okta authentication processes, including MFA resets and new-device enrollment. Rather than relying only on malicious…

Nexcorium DVR https://www.pexels.com/photo/camera-de-surveillance-25391056/

DVRs Now Turning Into DDoS Attack Infrastructures

The IoT attack surface has never been larger—or more neglected. This trend was captured by FortiGuard Labs, which tracked a campaign in which a Mirai-variant botnet (dubbed Nexcorium) exploits CVE-2024-3721. The command injection vulnerability found…

GrafanaGhots Grafana https://www.pexels.com/photo/a-person-in-white-cloth-standing-on-a-grassy-field-9778975/

How GrafanaGhost Turned Your Observability Stack Into an Exfiltration Engine

Data analytics and monitoring platform Grafana serves as the central nervous system for enterprise telemetry, financials, and customer data in over 7,000 enterprises across the globe, including 70% of Fortune 50. While the consolidation and…

digital trust identity resilience security https://www.pexels.com/photo/home-office-creative-desktop-tools-16071270/

Why Enterprises Must Rethink Trust From the Inside Out

In modern enterprise environments, credential compromise serves as the dominant pathway for breaches. The rise of techniques such as deepfake technology and job candidate fraud exposes gaps in identity security that cannot be closed by…

AI agents non-human identities https://www.pexels.com/photo/white-jigsaw-puzzle-illustration-262488/

Why AI Agents Are Outrunning Enterprise Security Controls

The AI boom and other ongoing developments in recent years have led to a fundamental shift in the identity landscape. Keeper Security’s recent AI and Non-Human Identities Are Outpacing Security Controls report details a continuing…

UNC6783 social engineering cybersecurity https://www.pexels.com/photo/close-up-of-hands-typing-on-laptop-keyboard-indoors-36175215/

UNC6783 Is Turning Enterprise Support Channels into Extortion Entry Points

Google Threat Intelligence Group (GTIG) says a financially motivated threat cluster it tracks as UNC6783 is targeting business process outsourcers, help desks, and other enterprise support teams as an entry point into larger organizations. The…

Glasswing Claude Mythos https://www.pexels.com/photo/pink-white-black-purple-blue-textile-web-scripts-97077/

What Mythos and Glasswing Should Signal to Every Security Leader

The recent announcement of the Claude Mythos Preview and Project Glasswing represents a step forward in AI-empowered security initiatives. The fact that the Mythos model is being withheld from public release is an implicit acknowledgment…

Modbus OT operational technology critical infrastructure https://www.pexels.com/photo/high-voltage-power-lines-at-sunset-28912010/

How a 40-Year-Old Protocol Is Leaving Critical Infrastructure Exposed

A decades-old industrial communications protocol still used to connect controllers, sensors, and monitoring equipment is leaving some critical infrastructure systems exposed online. Researchers at Comparitech said they identified 179 likely real industrial control system devices…

Ivanti vulnerability exploit https://www.pexels.com/photo/black-metal-padlock-706500/

Ivanti Exploitation Underscores the Fragility of Mobile Infrastructures

The active exploitation (CVE-2026-1340) of the Ivanti Endpoint Manager Mobile solution lays bare an uncomfortable irony at the heart of enterprise security: The platforms organizations deploy to govern and protect mobile devices have become high-value…

Axios code software supply chain https://www.pexels.com/search/software%20code%20supply%20chain/?orientation=landscape&people_count=0

The Axios Supply Chain Attack and What It Reveals About Open Source's Invisible Risk

In modern cybersecurity, open-source tools can often provide the perfect avenue for attackers due to widespread access and dependencies. The Axios promise-based HTTP client is present in around 80% of cloud and code environments, making…

DPRK LNK files North Korea https://pixabay.com/illustrations/north-korea-dprk-korea-juche-asia-1151137/

How North Korean Hackers Turned GitHub Into a Spy Network Hiding in Plain Sight

Attackers are constantly looking to develop their tactics and technologies for increased success, requiring ongoing intelligence and advancement in security to account for the evolution of risk. Recently, threat actors linked to the DPRK have…

Citirx CISA

CISA Flags Actively Exploited Citrix NetScaler Vulnerability

CISA has elevated Citrix CVE-2026-3055 from a vendor advisory to an active response issue. On March 30, the agency added the NetScaler flaw to its Known Exploited Vulnerabilities catalog and directed federal civilian agencies to…

permissions least privilege access report

Why Enterprise Permissions Are AI's Most Dangerous Inheritance

Broken access control has led the OWASP Top 10 for six straight years, affecting 100% of tested applications in 2025. However, nobody had ever measured actual permission usage in production to answer the question of…

Ubuntu Qualys privilege escalation

Ubuntu Patches Snap Flaw That Could Let Local Users Gain Root

Ubuntu has patched a local privilege-escalation flaw tied to Snap that could let an unprivileged local user gain root access on affected systems. Qualys disclosed the vulnerability this month, saying it stems from the interaction…

Subscribe for the Latest News

Webinars

Wednesday, Oct. 21 1pm ET / 10am PT

Where AI Is Delivering Real Security Impact

Wednesday, Oct. 21 1pm ET / 10am PT

You're Not as Protected as You Think: IDC on the SaaS Recovery Myths

Thursday, Oct. 22 1pm ET / 10am PT

Prevent AI-driven attacks with Koi Agentic Endpoint Security