Author: Staff Writer

Summary Points Critical Vulnerability Alert: Thousands of Fortinet instances are at risk due to the exploitation of the legacy flaw CVE-2020-12812, initially disclosed in July 2020. Improper Authentication: The flaw allows users to bypass two-factor authentication in FortiOS SSL VPNs, exploiting case sensitivity issues in LDAP configurations. Persistent Threat: Over 10,000 unpatched Fortinet firewalls remain vulnerable, recently targeted by various malicious actors, including ransomware groups. Urgent Action Required: Fortinet urges users to check for impacts and apply necessary patches to protect their systems from this longstanding vulnerability. Widespread Vulnerability Exposed Recent warnings from researchers highlight a significant risk to thousands…

Essential Insights Vulnerability to IPI: Researchers from Radware reveal that ChatGPT’s new features, including connectors and long-term memory, can enhance the severity of indirect prompt injection (IPI) attacks. Persistent Attacks: The “ZombieAgent” exploit demonstrates how attackers can use ChatGPT’s memory to execute persistent malicious instructions, potentially compromising sensitive user information. Existing Techniques Still Effective: ChatGPT remains susceptible to old prompt injection techniques, allowing attackers to subtly manipulate the AI for data exfiltration without needing sophisticated methods. Inadequate Fixes: While OpenAI has implemented a partial fix to mitigate ZombieAgent, experts argue that deeper structural changes are necessary to improve AI defenses…

Top Highlights Security Risks Accelerate: Companies’ fragmented adoption of AI tools poses significant security threats as many employees rely on personal accounts lacking proper oversight. Widespread Shadow AI Usage: Nearly 47% of employees use generative AI platforms without company supervision, creating vulnerabilities that hackers can exploit. Trends in AI Adoption: The use of personal AI accounts dropped from 78% to 47%, while company-approved accounts rose from 25% to 62, indicating some progress but revealing ongoing challenges in governance. Call for Governance: Experts recommend prioritizing AI governance processes, clearer policies, and enhanced visibility to mitigate risks associated with unvetted AI use…

Essential Insights AI and LLMs are drastically reducing the cost and skill barrier for cybercrime, enabling rapid orchestrations of attacks like self-modifying malware and autonomous espionage operations. Malware utilizing LLMs can dynamically adapt in real-time, evading detection and enabling sophisticated attacks such as reconnaissance and data exfiltration at unprecedented speeds. Defenders are leveraging AI—through vulnerability detection, autonomous pentesting, and threat hunting—to proactively identify vulnerabilities and anomalies, transforming cybersecurity strategies. The double-edged nature of AI necessitates responsible development, with emphasis on building guardrails, transparency, and regulatory frameworks to steer AI’s power toward beneficial use while mitigating risks. Problem Explained Recently, a…

Quick Takeaways AI-Centric Threats: Moody’s 2026 outlook warns that AI-driven cyberattacks will become increasingly sophisticated, introducing risks like adaptive malware and early signs of autonomous attacks. Growing Cryptocurrency Risks: An uptick in cryptocurrency thefts is anticipated, primarily due to cyberattacks on transaction and storage platforms. Regulatory Challenges: Diverging regulatory approaches across regions, particularly between the EU and the U.S., pose obstacles to achieving global harmonization, leaving gaps for attackers to exploit. Need for AI-Driven Defenses: Companies failing to adopt AI-driven defense mechanisms will face heightened vulnerability, as manual processes are insufficient against evolving cyberthreats. The Rising Threat of AI-Powered Cyberattacks…

Fast Facts UAT-7290 is a sophisticated hacking group linked to the Chinese government, actively targeting critical telecommunications and infrastructure in South Asia since 2022, with recent expansion into Southeastern Europe. The group employs detailed reconnaissance, multiple attack methods—including exploiting security flaws and brute force—and functions as an initial access broker for other hacking entities. Their toolkit includes advanced Linux-based malware (RushDrop, DriveSwitch, SilentRaid) that evade detection via stealthy checks, modular plugins, and covert communication using normal internet traffic. UAT-7290’s operations demonstrate high technical sophistication aimed at deep network control, posing a serious threat to regional communications and critical infrastructure security.…

Quick Takeaways Microsoft is enforcing mandatory multi-factor authentication (MFA) for all users accessing the Microsoft 365 admin center, with full enforcement beginning February 9, 2026. The policy aims to strengthen defenses against credential-based attacks, which cause over 300 million daily attempts, especially targeting high-privilege admin accounts. Administrators must implement MFA immediately using guides or wizard tools to prevent lockouts and ensure security during critical operations. This move aligns with compliance standards and signals a broader shift toward stronger authentication measures amid rising AI-powered phishing threats. Problem Explained Microsoft is strengthening its security measures by mandating multi-factor authentication (MFA) for all…

Quick Takeaways Rugged IoT devices enable critical real-time operations in harsh environments but face unique cybersecurity challenges due to their disconnected, physically stressed, and legacy-integrated nature, requiring a shift from traditional security models. Existing standards like ISA/IEC 62443 and NIST SP 800-82 are foundational but limited in rugged edge environments; they mainly assume constant connectivity, physical security, and rapid updates, which are often infeasible in remote settings. Effective rugged IoT security demands a multi-layered, adaptive approach: device hardening, strong access control, network segmentation, physical safeguards, lifecycle management, and remote management—each tailored to the conditions of the edge. Investing in rugged…

Summary Points Global supply chains face increasingly overlapping disruptions, notably cyberattacks, hybrid warfare, aging infrastructure failures, and trade regulation use as geopolitical leverage, transforming risk from costs to security concerns. Cyberattack incidents on logistics surged nearly 965% from 2021 to 2025, with state-sponsored campaigns from Russia, China, and Iran targeting maritime infrastructure, heightening geopolitical and operational risks. Everstream recommends a comprehensive risk mitigation framework across procurement, planning, and logistics, including diversifying suppliers, developing contingency plans, and redesigning distribution networks to enhance resilience. For 2026, companies should prioritize resilience over cost-efficiency, employing scenario-based trade policy modeling, monitoring geopolitical exposure, and implementing…

Summary Points A critical, actively exploited code injection vulnerability (CVE-2025-37164) in HP Enterprise OneView allows remote, unauthenticated attackers to execute arbitrary code, significantly increasing security risks. The flaw stems from improper input validation, enabling malicious payloads to bypass security controls and gain unrestricted access to affected systems. CISA mandates immediate patch deployment, with all organizations urged to remediate within 21 days; failure to patch may lead to system disruptions or breaches. Organizations should proactively audit, patch, or consider discontinuing OneView services, while monitoring official advisories for updates on mitigation and detection measures. Key Challenge A serious security flaw, identified as…