Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

We've heard everyone talk about digital privacy, cybersecurity, and how we should set a strong password, but what most people fail to understand is the why. Why is it important to set a strong password? Why do we have to activate two-factor authentication? Why are software updates important? Even though we have a vague idea of why we need to do these things, we really don't know the future implications if we don't secure our digital information.

In late September, 2026, CrowdStrike's Counter Adversary Operations team collaborated with the United States Federal Bureau of Investigation (FBI) to disrupt several laptop farms operating across the U.S. maintained by DPRK-nexus adversary FAMOUS CHOLLIMA to fraudulently employ operatives at American companies while concealing their true location and identity.

Backup is not the outcome. Recovery is. When critical data becomes unavailable, businesses need more than a completed backup job. They need confidence that their data is protected, available and ready for recovery. That is why Acronis is introducing the Anti-Ransomware Recovery Warranty for eligible customers using Acronis Cloud Storage. The capability adds a clear recovery commitment to the secure cloud storage foundation customers already rely on.

Researchers at ReliaQuest have observed a surge in voice phishing (vishing) and Microsoft Teams phishing over the past several months, particularly from extortion groups like ShinyHunters. “Attackers overwhelmingly targeted users and their unmanaged devices to gain access to accounts,” the researchers write.

Every major security regulation now asks the same question: can you prove your systems are securely configured? Few of them define what “secure” means. CIS Benchmarks fill that gap. Misconfiguration remains one of the easiest ways into an organisation. Default accounts, legacy protocols and inconsistent settings across thousands of servers hand attackers a foothold. Regulators have noticed.

Together, CloudCasa by Catalogic and Dell PowerStore provide a complete disaster recovery solution for Kubernetes environments — combining PowerStore’s native array-to-array replication with CloudCasa’s Kubernetes-aware orchestration. PowerStore handles the data path, synchronously or asynchronously, while CloudCasa discovers workloads, validates the DR plan, and rebuilds Deployments, StatefulSets, and KubeVirt VMs on the target cluster, reconnecting them to the recovered volumes.

Before you buy another security tool or remove an existing control, answer one question: how does your website actually present the payment form? For e-commerce merchants completing PCI DSS Self-Assessment Questionnaire A (SAQ A), that architectural detail matters. An embedded payment form, a redirect, and a fully outsourced payment process are different arrangements, with different implications for how the SAQ A script-attack eligibility criterion applies.

An AI shopping assistant can recommend a product without being allowed to buy it. An agentic AI system may go further: access an account, select a payment method, interact with a checkout, and initiate a transaction. Each added permission changes the payment-security questions you need to answer. Before adding an agent to a payment journey, draw its boundary. What can it read? What can it change? What can it authorize? What happens when it encounters content controlled by someone else?

Picture a global telecom company. Three years ago, a marketing team launched a campaign microsite on a cloud platform and pointed a company hostname at it. The campaign ended and the team deleted the app. Nobody deleted the DNS record. A few years ago, that mistake could sit there for a decade. No one was looking. Today, attackers run automated sweeps across millions of domains, resolving every DNS record and checking whether the resource behind it still exists.

AI tools have made it remarkably easy for a company to expose its own data: None of these actions seem malicious, but each one moves sensitive information somewhere the security team cannot see. This new era of "move fast and break things”, a phrase famously coined by Mark Zuckerberg in the early Facebook days, benefits attackers. Company data now flows through more places, more third parties, and more delegated credentials.