Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

For many survivors of gender based violence, abuse continues long after physical contact ends. It can follow them into their devices, accounts and online spaces, creating a sense of being watched, monitored or controlled. These digital harms are often confusing and hard to identify, and survivors are frequently told to simply “change their passwords” or “turn off social media.”

Critical vulnerabilities in React Server Components (CVE-2025-55182) and Next.js (CVE-2025-66478) enable unauthenticated remote code execution in default configurations. The flaw resides in the "Flight" protocol used for server-side rendering, making it a sought after target for adversaries looking to bypass standard controls. While the public discourse is currently cluttered with unreliable exploits, we need to ground our defense in verifiable network evidence.

Cybersecurity in 2026 is entering its most transformative and volatile phase yet. For CISOs, the landscape is no longer defined only by web, network, and cloud threats. Instead, attackers now target AI/LLM systems, APIs, identity platforms, SaaS ecosystems and supply chains. The surge in attacks across applications, APIs, and GenAI systems indicates that adversaries are scaling faster, using automation, AI-assisted exploitation, and new social engineering vectors.

Six months ago, we encountered a problem with no clear solution. We were building an AI agent inside a startup. When customer conversations were flowing in, we started looking for privacy tools that could keep up. Everything we found fell into one of three buckets: Somewhere in the middle of this, we caught ourselves looking for a simple, affordable way to mask data before it hits AI systems.

Secrets don’t belong in plaintext. GitGuardian's Push-to-Vault automates vaulting exposed secrets, helping security teams scale governance and reduce incident fatigue.

Acronis once again received recognition from Info-Tech SoftwareReviews, this time in the form of an Emotional Footprint Award for extended detection and response (EDR). The latest accolade highlights Acronis’ growing leadership in cybersecurity and its dedication to delivering solutions that managed service providers (MSPs) love.

As organizations grow, so does the complexity of managing who has access to which apps and systems. For Atlassian teams, Jira and Jira Service Management (JSM) often serve as the central hub for operational workflows, yet access governance is still handled through scattered emails, manual approvals, or outdated processes. Access governance, simply put, is the system of ensuring that the right individuals receive the correct level of access at the right time.

Researchers at Palo Alto Networks’ Unit 42 are tracking two new malicious AI tools, WormGPT 4 and KawaiiGPT, that allow threat actors to craft phishing lures and generate ransomware code. These tools are criminal alternatives to mainstream AI tools like ChatGPT, with no safety guardrails to prevent users from using them for malicious activities. The latest version of WormGPT offers lifetime access for $220, or a monthly fee of $50.

KnowBe4 is proud to announce that three of its leading security products — Security Awareness Training, PhishER/PhishER Plus and Compliance Plus — have been recognized as 2026 Buyer's Choice award winners by TrustRadius, a HG Insights company and buyer intelligence platform for business technology.

The modern JavaScript ecosystem was shaken this week as Meta, Vercel, Google Cloud, AWS, and leading security researchers revealed two critical issues: CVE-2025-55182 and the downstream Next.js variant CVE-2025-66478. Both are rated CVSS 10 and allow remote code execution (RCE) by exploiting weaknesses in the React Server Components (RSC) “Flight” protocol. The vulnerabilities affect React 19 and all major frameworks embedding the RSC implementation, most notably Next.js 15.x and 16.x.