Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cybersecurity is reaching an inflection point. Attackers use AI to research vulnerabilities, develop exploits, and run increasingly automated campaigns, compressing the time defenders have to respond. As that window shrinks, defenders need to know which vulnerabilities an attacker can actually reach. Answering that question is difficult when security tools provide separate views of vulnerabilities, assets, and network controls.

Social engineering attacks differ from other cyberattacks most businesses face. In this type of attack, attackers exploit human trust rather than depending only on technical vulnerabilities. They impersonate employees or business partners to trick people into sharing sensitive information or transferring money. In some cases, they are also granted unauthorized access to company systems.

Security teams have never been better at finding problems. Discovery is broader, detection is sharper, and the volume of findings keeps climbing. But a finding is not a fix. When teams identify a risky AI agent, an exposed MCP server, or an active attack against an API, what happens next usually looks the same: someone triages it, someone opens a ticket, and someone on another team eventually makes the change. Until then, the risk stays exactly where it was.

Cyber intrusions targeting the legal sector nearly doubled between 2023 and 2026, reflecting the value of legal entities to both eCrime and nation-state adversaries. Legal entities hold privileged communications, corporate transactions, intellectual property, government matters, and financial records that make them valuable targets for threat actors seeking financial gain or long-term strategic intelligence.

PHP2Shell is a pair of critical PHP flaws that leaked before disclosure and drew instant interest from attackers. This post covers what CYJAX analysts have seen on cybercriminal forums and code repositories, and what organisations running PHP should do now.

Voice-based fraud now accounts for billions in annual losses, and the FBI has flagged AI-assisted voice fraud as one of the fastest-growing financial crime vectors in the country. Your email security didn’t catch it. Your DMARC configuration didn’t fire. Neither did your anti-phishing stack. That’s not a gap in your tools. It’s a gap in your threat model. How does vishing work?

Researchers at Cisco Talos are tracking a significant increase in phishing campaigns that abuse legitimate platforms. Attackers abused more than 25 legitimate services over the past year, including “collaboration, productivity, file-sharing, survey, payment and AI-related platforms.” In two campaigns, attackers used order notifications from Staples and Dell to distribute phishing messages.

CERT-FR’s October 13 update reports compromises of refrigeration controllers, naming Danfoss AK-SM and AK-SC alongside Copeland/Dixell XWEB systems. The entry methods remain unconfirmed. CERT-FR warns that attacks are probably continuing and recommends removing public exposure, checking configurations, and securing remote access. Compromised operational technology (OT) can disrupt cooling, compromise stored products, and threaten cold-chain continuity.