Author: Staff Writer

Fast Facts The traditional network perimeter has collapsed due to remote work and cloud adoption, making identity the central focus of cybersecurity defenses. Over 80% of breaches involve compromised credentials, highlighting the shift from network flaws to identity-based attacks. Zero Trust security frameworks now emphasize verifying identity at every access point, incorporating MFA, role-based controls, and continuous monitoring. The future of cybersecurity relies on strengthening identity foundations, with biometrics, machine identities, and adaptive access becoming essential components. Underlying Problem The story explains how traditional cybersecurity measures have become obsolete due to the dissolution of the network perimeter caused by remote…

Essential Insights The GCVE database is a new, free platform aimed at increasing Europe’s digital sovereignty by providing an independent source for IT security vulnerabilities, reducing reliance on US databases. It was developed in response to fears over the potential discontinuation of the CVE program in 2025, prompting a search for alternative vulnerability management solutions. The platform employs a decentralized system that assigns and publishes vulnerability identifiers independently, integrating data from over 25 sources for comprehensive coverage. Its open API allows seamless incorporation into existing security and compliance tools, enhancing efficiency for security teams and developers in threat tracking and…

Summary Points In late 2025 and early 2026, the European Space Agency (ESA) suffered a major cyberattack, revealing critical cybersecurity vulnerabilities. Hackers stole hundreds of gigabytes of sensitive data, including proprietary software, credentials, and mission documents. The attack exposed the ESA’s inadequate cybersecurity defenses, highlighting the growing threat to critical space and scientific infrastructure. This incident underscores the urgent need for enhanced cybersecurity measures in the space sector to protect valuable data and national security. The Issue In late 2025 and early 2026, the European Space Agency (ESA), one of the world’s leading scientific organizations, experienced a series of severe…

Quick Takeaways Web browsers are prime attack vectors in enterprises, exploited through phishing, malware, and browser vulnerabilities, especially with the rise of SaaS and remote work. Enterprise secure browsers, emerging prominently in 2025, offer advanced isolation, malware detection, data loss prevention, and integration with security platforms to mitigate browser-based threats. Evaluation of secure browsers requires robust management, MFA, session isolation, access controls, malware detection, logging, and integration with existing security tools, with deployment modes tailored for versatility. Costs for secure browsers typically run around $10/month per user, with various product options (cloud-based, thick clients, extensions), and require significant support and…

Top Highlights Microsoft Intune MAM updates, starting January 19, require all iOS and Android apps, including Outlook and Teams, to be upgraded to the latest versions to ensure security and functionality, or they will be blocked. iOS apps must upgrade to SDK version 20.8.0+ (Xcode 16) or 21.1.0+ (Xcode 26) and app wrapping tools to the latest versions, while Android apps need the updated SDK and Microsoft Company Portal version 5.0.6726.0+. Enterprises should proactively verify app versions and enforce policies like conditional access to prevent app launch blocks, ensuring continuous access to corporate resources. The update enhances security controls, such…

Essential Insights New Research Initiative: Information Services Group (ISG) is launching a comprehensive study to assess cybersecurity service providers for enterprises navigating hybrid IT environments and enhancing cyber resilience. Focus on Emerging Challenges: The research will evaluate how cybersecurity offerings evolve to address threats in complex hybrid architectures, helping organizations protect sensitive data and ensure operational continuity. Comprehensive Reporting: Scheduled for July 2026, the study will produce ISG Provider Lens reports analyzing strategic and technical security services, risk management, and advanced cybersecurity solutions. Industry Demand and Trends: Enterprises are increasingly pressured to bolster cybersecurity as regulatory requirements grow. The research…

The series on Privacy Enhancing Technologies (PETs) highlights a transition from theoretical discussions to practical applications, particularly around Privacy-Preserving Federated Learning (PPFL). Key insights include the need for research into real-world applications of PPFL across jurisdictions, focusing on privacy preservation without centralized data processing. Future collaboration between the UK and US aims to leverage PETs for innovative research in rare pediatric cancers, enabling cross-border data analysis while maintaining data privacy. The NIST PETs Testbed is underway to explore PPFL’s deployment complexities, aiming to create frameworks that navigate privacy-utility trade-offs in federated learning models. Applicability in Day-to-Day IT Operations Privacy-Preserving Federated…

Fast Facts Leaked internal communications from the BlackBasta ransomware group and the Russian hosting provider Yalishanda exposed key insiders, revealing the interconnected infrastructure supporting cybercriminal operations. Yalishanda, operating under the guise of Media Land, provided critical bulletproof hosting services, enabling BlackBasta to maintain approximately 200 servers and operate with minimal risk of takedown. These leaks led to international sanctions against Media Land’s leadership, including Aleksandr Volosovik and Kirill Zatolokin, highlighting the professionalized and organized nature of cybercrime supply chains. Bulletproof hosting providers like Yalishanda serve as safe havens for ransomware groups, offering dedicated, abuse-resistant infrastructure that allows cybercriminals to focus…

Top Highlights Introduction of ChatGPT Health: OpenAI launched ChatGPT Health, a chatbot aimed at providing secure health advice by integrating users’ health information with AI, but significant safety and data security concerns accompany it. Enhanced Security Features: The product promises additional protections like encryption and isolation for health conversations, though specifics on regulatory compliance and data security remain unclear. Concerns Over Data Sharing: Users can opt to connect their medical records to third-party apps, raising risks about privacy loss and vulnerability to data breaches, despite assurances of controlled data sharing. Advice for Caution: Experts warn users to be cautious in…

Quick Takeaways A sophisticated social engineering attack led to the redirection of employee salaries by manipulating help desk processes, without any malware or system breach. The attacker impersonated employees and used publicly available information to deceive help desk teams into resetting passwords and re-enrolling multi-factor authentication. The breach was enabled by systemic vulnerabilities in help desk workflows and the threat actor’s persistent efforts to maintain access via registered external email addresses. The incident highlights a growing trend where cybercriminals prefer social engineering over technical exploits, exploiting human vulnerabilities in organizational security. What’s the Problem? A seemingly simple phone call exposed…