Author: Staff Writer

Essential Insights Strategic Appointments: The Chertoff Group has appointed cybersecurity leaders Michael Johnson, Sammy Migues, and John Steven as senior advisors to bolster its advisory services amidst growing cyber risks. Expertise and Innovation: The firm integrates top-tier private and governmental cybersecurity expertise to enhance practical guidance for clients across various industries facing complex technological challenges. Diverse Specializations: Johnson comes from Meta with extensive experience in FinTech security; Migues is renowned for his work on software security frameworks; and Steven has significant influence in application security and automation strategies. Enhanced Advisory Services: This expansion positions The Chertoff Group to deliver stronger…

Essential Insights Fortinet is experiencing a critical, actively exploited zero-day vulnerability (CVE-2026-24858) that allows attackers to bypass authentication and gain privileged access to multiple products, with some exploitation already occurring. The vulnerability affects several Fortinet products, including FortiAnalyzer, FortiManager, FortiOS, FortiProxy, and FortiWeb, and has a high CVSS score of 9.8; patches are not yet available. Attackers exploited this flaw by creating unauthorized accounts and reconfiguring firewalls, often targeting devices with FortiCloud SSO enabled, which many instances still have exposed online. Despite ongoing vulnerabilities and criticism over Fortinet’s delayed responses, security experts emphasize the importance of promptly applying best practices…

Quick Takeaways NIST Reassessment: The National Institute of Standards and Technology (NIST) is re-evaluating its role in managing software vulnerabilities due to overwhelming demand and prior funding issues threatening the National Vulnerability Database (NVD). Strategic Prioritization: NIST will prioritize vulnerability enrichment based on factors like criticality and exploitation status, aiming to formalize a previously informal system to manage the influx of vulnerabilities effectively. Shifting Responsibility: Plans are underway for NIST to transfer vulnerability analysis responsibilities to CVE Numbering Authorities (CNAs), marking a significant shift in its operational focus back to research and standards. Collaborative Efforts: NIST seeks to improve collaboration…

Top Highlights Zero-Day Vulnerability: Fortinet’s new zero-day vulnerability, CVE-2026-24858, allows attackers to exploit the FortiCloud single sign-on feature, facilitating unauthorized access to devices. Critical Authentication Flaw: The vulnerability boasts a critical CVSS score of 9.8 and enables attackers with a FortiCloud account to log into other users’ devices, posing significant security risks. Exploitation Awareness: The issue has led to malicious logins on Fortinet devices, even on those patched against a prior vulnerability (CVE-2025-59718), raising concerns of potential new attack vectors. Mitigation Actions: In response, Fortinet disabled FortiCloud SSO temporarily for all accounts, encouraged device upgrades, and identified around 10,000 exposed…

Essential Insights Widespread Shadow AI Adoption: About 60% of corporate employees are willing to use shadow AI tools to meet deadlines, indicating a strong push for productivity despite potential security risks. Frequent AI Use: 86% of workers employ AI tools at least weekly, with over one-third utilizing free versions approved by their employers. C-Level Dilemma: 70% of C-level executives prioritize faster production over security, emphasizing a growing tension between efficiency and safety in AI deployment. Security Concerns Highlighted: Experts warn that the push for AI adoption without adequate safeguards may compromise data security and risk customer safety, necessitating better governance…

Essential Insights Identity Security Oversight: 74% of IT leaders view identity security as an afterthought, leading to rushed, potentially misaligned solutions that can create costly complications later on. IAM Features: Effective Identity and Access Management (IAM) tools must possess security-first features like phishing-resistant multi-factor authentication and centralized identity intelligence for robust protection. Adaptability for Growth: Organizations should choose IAM platforms that can scale with their evolving identity needs, including support for diverse architectures, regulatory compliance, and user provisioning processes. Industry-Specific Compliance: Selecting an IAM solution requires consideration of industry-specific regulations to ensure compliance and effective access management, which can vary…

Top Highlights Credential Risk Underestimation: Organizations often focus on advanced threats like phishing and malware while ignoring the persistent risk posed by near-identical password reuse, which slips past established security measures. Compliant Yet Predictable: Users frequently modify existing passwords in predictable ways (e.g., changing a year or adding a number), which satisfies compliance but exposes them to credential-based attacks. Attacker Advantage: Cybercriminals exploit these predictable password patterns, using breached data and automated tools to crack accounts efficiently, as minor modifications do little to enhance security. Need for Smarter Policies: Traditional password policies fail to prevent near-identical reuse; organizations should implement…

Summary Points In December 2025, SoundCloud experienced a major data breach affecting nearly 30 million user accounts, compromising personal info like emails, usernames, and locations. The breach resulted from a vulnerability that allowed attackers to connect public profile data with email addresses, leading to extensive data exfiltration. Attackers demanded ransom and, upon refusal, publicly released the stolen data, heightening the risk of phishing and targeted attacks. Users are advised to monitor accounts, enable 2FA, change passwords, and be vigilant against potential social engineering threats. Underlying Problem In December 2025, SoundCloud revealed a major data breach impacting nearly 30 million users.…

Quick Takeaways The Sicarii ransomware has a critical bug where it generates and discards RSA private keys during each attack, making data recovery impossible even if victims pay the ransom or use decryptors. This encryption flaw reflects poor technical design rather than malicious intent, leading to a scenario where traditional ransom-based recovery methods are ineffective. Due to the broken encryption process, organizations must rely on secure backups and swift isolation rather than ransom negotiations, emphasizing the importance of proactive cybersecurity measures. The malware’s unusual attributes and potential vibe-coding suggest it may have been developed with immature practices or AI-assisted tools,…

Quick Takeaways Dragos disclosed a significant escalation in cyber threats, with a coordinated December attack targeting around 30 distributed energy sites in Poland, marking the first major attempt to directly compromise DER assets, which are increasingly central to grid operations. The Electrum threat group, linked to past Ukraine grid attacks, exploited vulnerabilities in RTUs and communication infrastructure, disabling OT devices and disrupting control, but did not cause power outages or systemic grid failure. The attack demonstrated a strategic shift from targeting centralized control systems to exploiting distributed edge assets, using opportunistic methods like wiping devices and resetting configurations, reflecting the…