Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

You may not often think about how far computer security has come over the last 30 years; the evolution is remarkable. Early attacks, such as viruses, passed around on floppy disks, worms spreading for notoriety, and hacktivism done for a cause felt more punk rock than organized crime. Today, according to Canalys, ransomware is the top concern for small businesses. But will it stay that way?

The Ivy League is the promised land for thousands of high school students, but it has also become a target for cyberattackers. Three of the most prestigious universities in the United States suffered sophisticated cyberattacks in fall 2025. Harvard University, Princeton University and the University of Pennsylvania have all disclosed data breaches that compromised sensitive information about alumni, donors, students and faculty members.

Sha1-Hulud has burrowed back into our lives, spreading rapidly and causing more destruction than ever. Named after the famous worm from the Dune franchise, this attack is also impacting global organizations. Since its first widescale spread on September 16, 2025, this worm has demonstrated its ability to propagate rapidly with high impact using the following techniques: This variant includes some new behavior, including.

As enterprise data moves across applications, databases, and analytics pipelines, uncontrolled proliferation of PII increases compliance risk and a potential breach. IT leaders and product managers are often struggling to find the best way to protect data. Protecto Vault helps organizations contain this risk by centralizing PII governance and offering two powerful architectural models to minimize data exposure – the Tokenization Model and the Centralized Profile Model.

Remote work is evolving and has become quite complex. The best remote employee management software heading into 2026 has taken a huge leap forward with advanced analytics and automation features that are perfectly integrated with employee experience capabilities to bring the team together.

Snyk empowers organizations to build fast and stay secure. As security and engineering teams scale their use of Snyk across the enterprise, understanding what's happening across your group and organizations becomes critical–from API integrations and user access patterns to policy changes and security events. However, raw audit logs alone can be overwhelming and difficult to interpret. Security leaders need instant visibility into critical events, risk patterns, and user activity.

In finance, protecting customer data isn’t just good practice. It’s a regulatory mandate. The SEC’s Regulation S-P (Privacy of Consumer Financial Information) requires financial firms to guard against unauthorized access, maintain robust data-disposal practices, and have a formal incident response program. As the threat landscape has evolved, so has the regulation. This all means one thing: complacency is no longer an option.

It’s a bold claim. And sometimes customers ask me, “What exactly do you mean by important?” That’s a fair question because importance isn’t about how complicated a workflow is, or how many tools it touches. It comes down to impact.

As enterprises embrace agentic AI, a new security risk equation emerges. In this episode of Security Matters, host David Puner sits down with Lavi Lazarovitz, VP of Cyber Research at CyberArk Labs, to unpack how AI agents and identity security are reshaping the threat landscape. Learn why privileged access is now the fault line of enterprise security, how attackers exploit overprivileged AI agents, and what security teams must rethink before scaling AI.

It starts with a simple audit. Your legal team checks Business Associate Agreements after OCR’s tracking technology guidance. Google Workspace BAA: signed. Analytics platform BAA: signed. CRM and marketing tools: covered. Then the question that changes everything: Do we have BAAs for the tracking pixels on our patient pages?