Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

You’re operating in a fast-moving cybersecurity environment. Every second, data flows, users log in, devices communicate, and threats lurk. Your tools are generating alerts—many of them valid, many more questionable. Before long, you face a constant tsunami of notifications. That’s where alert fatigue strikes: too many alerts, too little time, too much risk. When your team starts ignoring or delaying responses to alerts, the very purpose of your monitoring stack is undermined.

Here's the latest product news and updates from Nightfall at a glance.

Actors exploit RMM tools to target trucking and logistics companies, SesameOp uses the OpenAI Assistants API for C2 communications, and Google warns of rising adversary AI adoption in 2026.

On November 13, 2025, open source reporting began detailing active exploitation of a silently patched Fortinet FortiWeb vulnerability. The flaw is a path traversal issue in the FortiWeb web application firewall (WAF) that allows an unauthenticated threat actor to create new administrative users on exposed devices. The following day, November 14, Fortinet officially addressed the vulnerability in an advisory, tracking it as CVE‑2025‑64446.

FedRAMP is a government-wide program meant to ensure a standardized baseline for information security throughout the cloud service providers working with the federal government. It’s a tall order. Setting forth standards that are robust enough to cover all the bases, while being open and flexible enough to cover every CSP, is not easy.

Let’s face it: running a business today means dealing with threats you can’t even see. The Dark Web isn’t some fictional boogeyman; it’s a bustling, digital black market where cybercriminals are constantly plotting, selling, and trading the very keys to your company’s kingdom. If you’re relying solely on traditional firewalls and antivirus, you’re missing the biggest, most proactive move you can make: getting eyes on the Dark Web.

2025 has been a defining year for identity security, marked by a rapid increase in the volume, variety, and velocity of identities that organizations must now govern. The changes have been building for a long time, as identity tools have evolved from early single sign-on solutions and compliance-driven governance to the cloud-first, AI-powered world we live in now, which must enable employees with the access they need at lightning speed while maintaining security.

In this blog, we will navigate through a few enterprise-proven methods to make API key more secure. Read on!

Understanding the Deep Web and Dark Web is essential for CISOs navigating today’s threat landscape. This blog breaks down their differences, the risks they pose, and how intelligence-led monitoring helps organisations detect, prevent, and respond to cyber threats before they escalate.

On November 13, 2025, the United States’ Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), Department of Defense Cyber Crime Center (DC3), and Department of Health and Human Services (HHS) released a joint Cybersecurity Alert regarding Akira ransomware in conjunction with a number of additional authoring organizations, including Europol’s European Cybercrime Centre (EC3); France’s Office Anti-Cybercriminalite (OFAC)