// Industry News & Leadership
Intel Feed

Cybersecurity considerations 2025 kpmg.com

U.S. Agencies Warn of Rising Iranian Cyber Attacks on Defense, OT Networks, and Critical Infrastructure The Hacker News

CyberSec India Conference 2026 to Spotlight India’s Shift Toward Accountability-Driven Cybersecurity Machine Maker

According to a new law, the Hong Kong police can demand that you reveal the encryption keys protecting your computer, phone, hard drives, etc.—even if you are just transiting the airport. In a securit…

A threat actor has been running an active campaign on Reddit, using fake posts that promise free TradingView Premium access to deliver two malware families — Vidar on Windows and AMOS on macOS. The op…

The integration of AI coding agents has introduced new, high-impact attack surfaces for development teams. Phantom Labs at BeyondTrust recently discovered a critical command-injection vulnerability in…

A critical security flaw in the popular WordPress plugin “Ninja Forms – File Upload” has left approximately 50,000 websites vulnerable to complete takeover. Tracked as CVE-2026-0740, this flaw boasts …

A new ransomware campaign is putting organizations on high alert. A financially motivated threat group known as Storm-1175 has been running fast-paced attacks targeting vulnerable, internet-facing sys…

The high-end casino and hotel operator has likely paid a ransom to avoid a data leak. The post Wynn Resorts Says 21,000 Employees Affected by ShinyHunters Hack appeared first on SecurityWeek .

Threat actors are exploiting a maximum-severity security flaw in Flowise, an open-source artificial intelligence (AI) platform, according to new findings from VulnCheck. The vulnerability in question …

A China-based threat actor known for deploying Medusa ransomware has been linked to the weaponization of a combination of zero-day and N-day vulnerabilities to orchestrate "high-velocity" attacks and …

Netskope IPO Shows Why Cybersecurity Industry Is Such A Juggernaut: Analysis crn.com

Oracle E-Business Suite exploitation traced back as early as July Cybersecurity Dive

A security researcher operating under the alias Chaotic Eclipse (@ChaoticEclipse0) has publicly dropped a working zero-day local privilege escalation (LPE) exploit for Windows, dubbed BlueHammer, alon…

Bitdefender Starts the 2026 Season with Expanded On-Car Presence as Exclusive Cybersecurity Partner of Scuderia Ferrari HP Bitdefender

Setting the benchmark: Innovare crowned 2025 Cybersecurity Company of the Year The Business & Financial Times

Internet Intelligence Platform Targets Real-Time Cybethreat Defense Censys raised $70 million to expand its AI-driven cybersecurity platform, focusing on real-time visibility into internet infrastruct…

White House Criticizes Cyber Defense Agency - and Proposes a Steep $700 Million Cut The FY2027 proposal would cut roughly $707 million from CISA, reducing staffing, contractor support and coordination…

The authentication bypass flaw, tracked as CVE-2026-35616, is the latest in a series of Fortinet vulnerabilities that have been exploited in the wild.

The attack on the popular NPM package Axios is just one of many targeting maintainers and has shone a light on how threat actors can scale sophisticated social engineering campaigns.

PRT-scan is the second in recent months where a threat actor appears to have leveraged AI for automated targeting of a widespread GitHub misconfiguration.

A new attack, dubbed GPUBreach, can induce Rowhammer bit-flips on GPU GDDR6 memories to escalate privileges and lead to a full system compromise. [...]

The Federal Police in Germany (BKA) has identified two Russian nationals as the leaders of GandCrab and REvil ransomware operations between 2019 and 2021. [...]

Anthropic’s next model could be a ‘watershed moment’ for cybersecurity. Experts say that could also be a concern CNN