Threat actors have compromised a credential within the vendor’s infrastructure, allowing them to abuse a client assertion that bypasses traditional user authentication.
Nolan casts the invention of the Trojan horse as the ultimate violation of “Zeus’s law,” the idea that you should treat any stranger you encounter with kindness and respect, because they could very well be Zeus in disguise.
Read More The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust
Ivanti warns of active exploitation of CVE-2026-104935, a high-severity Connect Secure flaw.
Read More Ivanti Connect Secure Zero-Day Exploited in Attacks
Two years after the largest healthcare cybersecurity incident in history, the senate has passed The Health Care Cybersecurity and Resiliency Act of 2025.
Read More Healthcare Cybersecurity Has a Problem. This Bill Wants to Fix It
Patching is a necessary evil and doing it manually in any decent sized organization was essentially impossible in the pre-AI times and is now pure folly.
FortiBleed attacks are continuing, with the FBI and Secret Service warning of compromised Fortinet firewalls, account lockouts and potential ransomware activity.
Read More FBI Warns of FortiBleed Attacks Leading to Lockouts, Ransomware
While AI is reshaping the threat landscape, the people defending against those threats remain vital.
Read More AI May Be the Future, But Talent is What Builds Security
