2,380 articles · page 6 of 48
How-To Geek, Friday, February 20th, 2026
I've used Bitwarden for years, and for a long time I felt pretty good about that decision. I wasn't reusing passwords, I had strong, unique logins everywhere, and I wasn't relying on my browser to remember everything. But lately, with the steady rise in account takeovers, phishing kits, and credential-stealing malware, 'pretty good' stopped feeling good enough.
more →
Security Boulevard, Thursday, February 19th, 2026
How should security rules be organized? At first glance, this sounds like a simple data-modeling choice. In practice, it defines the daily reality of security operations: how quickly incidents can be debugged, how safely policies can evolve, how easily new offices or user communities can be onboarded, and whether growth leads to clarity-or chaos.
more →
The Hacker News, Wednesday, February 18th, 2026
In 2025, navigating the digital seas still felt like a matter of direction. Organizations charted routes, watched the horizon, and adjusted course to reach safe harbors of resilience, trust, and compliance.
more →
tech.co, Wednesday, February 18th, 2026
Plus, AI-powered phishing campaigns represented over 80% of social engineering events in 2025.
more →
Security Boulevard, Wednesday, February 18th, 2026
You know the drill - monitoring has basically turned into dashboard upon dashboard. What actually predicts a breach rarely fits neatly into a slide. The signals are uncomfortable, sometimes embarrassing, and usually harder to measure.
more → Security Boulevard, Wednesday, February 18th, 2026
We are seeing a steady rise in cyberattacks against critical infrastructure and it's not surprising. Many of these systems rely on legacy software riddled with known vulnerabilities. When these systems fail, the impact moves quickly from networks to operations, and from operations to public safety.
more → SecurityWeek, Tuesday, February 17th, 2026
New research shows attackers increasingly abusing APIs at machine speed as AI-driven systems widen exposure and amplify impact.
more →
SC Media, Tuesday, February 17th, 2026
For your organization to stay ahead of current and future threats, it can't rely on yesterday's cybersecurity technology. Unfortunately, even as attackers continue to refine their skills and use new techniques, many companies continue to deploy outdated firewalls and legacy endpoint protections.
more → SC Media, Tuesday, February 17th, 2026
A seismic shift has taken place, one so profound that only a handful of companies will survive in its wake. This isn't incremental improvement: it's a foundational rewrite of how software, infrastructure, and networks operate, powered by GPU-driven reasoning, ultra-fast inference, collapsing cost curves, and agentic intelligence.
more → SC Media, Tuesday, February 17th, 2026
Identity abuse now drives nearly two-thirds of all breaches, according to a Feb. 17 report by the Unit 42 research group at Palo Alto Networks.
more → Security Boulevard, Tuesday, February 17th, 2026
Defenders might be bummed, but not surprised, to know that adversaries have shifted from immediate disruption to long-lived access, according to research from Picus Labs.
more → Security Boulevard, Monday, February 16th, 2026
Firewall penetration testing examines the firewall as a security control and identifies the weaknesses that allow unwanted traffic to reach internal systems.
more → Secure Reading, Friday, February 13th, 2026
Attackers rarely 'hack' systems directly anymore. Instead, they log in. Phishing, credential stuffing, password reuse, and data breaches have made passwords easy to steal and cheap to abuse.
more →
Security Boulevard, Friday, February 13th, 2026
A survey of 512 cybersecurity professionals finds 76% report that over half (54%) of the security incidents that occurred in the past 12 months involved some issue relating to identity management.
more → Security Boulevard, Thursday, February 12th, 2026
In cybersecurity, we like to believe that leaders are created by better products, stronger execution, and higher revenue. That belief is incomplete.
more → Security Boulevard, Wednesday, February 11th, 2026
Amazon Web Services (AWS) is a cloud-computing platform offered by Amazon, which provides cloud services such as computing power, storage, databases, networking, and automated intelligence. AWS replaces data centres, builds applications, and offers pay-as-you-go. The unique features of AWS are scalability, global infrastructure, security, cost-effectiveness, and flexibility.
more → Security Boulevard, Wednesday, February 11th, 2026
Over the last few weeks I published a post on the architectural and operational gaps that created the new wave of SIEM and AI SOC vendors. A bunch of people asked the same follow-up question: 'Ok, but how do I evaluate vendors consistently without falling back into feature checklists and marketing claims?'
more → The Hacker News, Wednesday, February 11th, 2026
It's Patch Tuesday, which means a number of software vendors have released patches for various security vulnerabilities impacting their products and services.
more → Analytics Insight, Wednesday, February 11th, 2026
How Behavioral AI and Zero Trust Could be Shaping Cybersecurity Software
more →
Dark Reading, Wednesday, February 11th, 2026
CISOs should focus on harnessing and securing AI and building new skills among their people. Vision and change management can transform security.
more →
siliconANGLE, Monday, February 9th, 2026
A new report out today from security rating firm SecurityScorecard Inc. warns that widespread vulnerabilities in OpenClaw deployments have left tens of thousands of internet-facing instances exposed to takeover through misconfigured access controls and known exploits.
more →
Analytics Insight, Monday, February 9th, 2026
Must-Read Books for Cybersecurity and Ethical Hacking
more → Architecture and Governance, Monday, February 9th, 2026
For years, most organizations have assumed that Identity Governance and Administration (IGA) was all about compliance. With that in mind, most of them invested heavily to ensure they remain in good books with regulators and auditors. Whether it's completing access reviews on time, signing off on certificates, generating necessary reports, you name it! Everything seemed to check out. At least on paper. In reality, things played out a bit differently.
more →
Information Week, Monday, February 9th, 2026
AI is exposing blind spots in traditional security defenses. CIOs may be creating new risks as fast as they can eliminate them. Is automation the only viable response?
more →
SC Media, Monday, February 9th, 2026
Looking to finally modernize and secure federal government networks, the Cybersecurity and Infrastructure Security Agency (CISA) on Feb. 5 gave civilian agencies one year to replace all end-of-support (EoS) edge devices.
more → The Register, Monday, February 9th, 2026
The creators of security software have encountered an unlikely foe in their attempts to protect us: modern compilers. Today's compilers boil down code into its most efficient form, but in doing so they can undo safety precautions.
more →
The Record, Thursday, February 5th, 2026
Federal civilian agencies have been ordered to remove end-of-life devices within 12 months due to widespread exploitation campaigns by sophisticated hackers.
more →
Search Security, Wednesday, February 4th, 2026
Cybersecurity threat intelligence feeds provide critical data on attacks, including IPs, domains and malware hashes, helping teams detect and respond to threats effectively.
more →
Help Net Security, Wednesday, February 4th, 2026
National governments already run cybersecurity through a mix of ministries, regulators, law enforcement, and private operators that own most critical systems.
more →
Security Boulevard, Wednesday, February 4th, 2026
Ever felt like you're drowning in xml tags while trying to get a simple login working? SAML is that old-school beast that still runs the show for big enterprise deals, even if it feels a bit clunky compared to modern stuff.
more → SC Media, Tuesday, February 3rd, 2026
A new Fortinet report reveals that despite increased cybersecurity spending, most organizations lack confidence in their ability to manage escalating cloud threats, with two-thirds doubting their capacity for real-time detection and response, according to Security Boulevard.
more → Dark Reading, Tuesday, February 3rd, 2026
Recent supply chain attacks involving self-propagating worms have spread far, but the damage and long-term impact is hard to quantify.
more → Security Boulevard, Tuesday, February 3rd, 2026
Ever wonder why we're still talking about basic auth in 2024 when we have fancy things like passkeys and OIDC? It's because, honestly, the enterprise world still runs on it-whether we like it or not.
more → The Register, Monday, February 2nd, 2026
Barely a month into 2026, electrical power infrastructure on two continents has tested positive for cyberattacks. One fell flat as attempts to infiltrate and disrupt the Polish distribution grid were rebuffed and reported. The other, earlier attack was part of Operation Absolute Resolve, the US abduction of Venezuela's President Maduro from Caracas on January 3.
more → SC Media, Monday, February 2nd, 2026
Our team's analysis of 1.46 trillion network flows across 2,500 global enterprises found that nearly half of these companies use Transport Layer Security (TLS) inspection. What's more, only 3% of companies inspect all relevant TLS-encrypted sessions.
more → SC Media, Monday, February 2nd, 2026
A new report from The Identity Underground reveals a significant disconnect between executive priorities and frontline capabilities in managing AI-driven identity threats, according to BetaNews.
more → ITPro, Monday, February 2nd, 2026
The new guidelines aim to move an organization from discovery to target-level implementation of zero trust practices
more →
Security Boulevard, Monday, February 2nd, 2026
Threat Intelligence is the process of collecting, analyzing, and contextualizing data about existing and emerging cyber threats to produce actionable insights that help organizations prevent, detect, and respond to cyberattacks.
more → Security Boulevard, Monday, February 2nd, 2026
In an era defined by digital transformation, cloud adoption, and hyperconnectivity, cybersecurity has become a top priority for organizations of every size and industry. Cyberattacks are no longer limited to simple malware or phishing emails-they now include ransomware-as-a-service (RaaS), zero-day exploits, insider threats, supply-chain compromises, and nation-state-backed attacks.
more → Security Boulevard, Monday, February 2nd, 2026
Ever tried explaining to a frantic ceo why they can't just use "Password123" for the main admin portal? It's a losing battle, honestly, but 2025 is finally looking like the year we might actually kill the password for good.
more → Security Boulevard, Monday, February 2nd, 2026
I first tried to 'shift left' cloud identity in early 2020. We were building a greenfield AWS environment with a strong cloud team and leadership support to do things properly. The idea was familiar: push security decisions earlier, give developers autonomy, and avoid becoming the bottleneck later.
more → Security Boulevard, Monday, February 2nd, 2026
In a world where businesses are built on digital infrastructure, IT security has become a critical pillar of organizational resilience and trust. From cloud computing and remote workforces to SaaS applications and connected devices, modern IT environments are larger, more complex, and more exposed than ever before. At the same time, cyber threats are growing in scale, speed, and sophistication-making traditional, reactive security approaches ineffective.
more → ITWire, Sunday, February 1st, 2026
Every organisation now operates across hybrid and multi-cloud, where the traditional perimeter no longer applies. Attackers exploit encrypted and East-West traffic to move laterally and evade detection.
more →
Search Security, Friday, January 30th, 2026
Deepfakes are wreaking havoc worldwide -- and they're likely just getting started. To fight fire with fire, CISOs should consider AI-enabled deepfake detection tools.
more → How-to Geek, Friday, January 30th, 2026
I self-host almost every service I use in my homelab. If I can self-host it, chances are, I do-except for passwords. I refuse to self-host my password manager, and find that a hosted password manager gives me the peace of mind I need for my digital life.
more → Security Boulevard, Friday, January 30th, 2026
If you followed breach disclosures in January 2026, a pattern quickly became hard to ignore. Very different organizations reported incidents within a short span of time.
more → Security Boulevard, Friday, January 30th, 2026
Authentication is the foundation of application security, yet it's one of the most frequently mishandled aspects of software development. With credential-based attacks accounting for over 80% of data breaches and costing organizations an average of $4.45 million per incident, getting authentication right isn't just good practice-it's business critical.
more → Search Security, Thursday, January 29th, 2026
Uncover the 2026 cybersecurity predictions, trends, tools and strategies CISOs need to navigate evolving business and threat landscapes.
more → IT Security Guru, Thursday, January 29th, 2026
Michael Daniels, Michael Daniel, CEO of the Cyber Threat Alliance and Former Cybersecurity Advisor to President Barack Obama, spoke to the IT Security Guru about the current cyber landscape
more →
IT Security Guru, Thursday, January 29th, 2026
Despite strong vulnerability scores, majority of organisations have gaps in core security controls like MFA, endpoint detection and policy management, creating overlapping exposure across enterprise environments.
more →