Enterprise Security security analysis.

the dwell time paradox: identifying bossai through network-layer behavioral analysis

Researchers identified the 'BOSSAI' operation, an AI-assisted attack network that has targeted government services, banks, and military systems across multiple countries.

Nov 7, 2026, 11:04 AM

the dwell time collapse: beyond the wordpress rce event

Security researchers report over 240,000 blocked exploit attempts targeting an unauthenticated remote code execution vulnerability in WordPress core since its disclosure on October 28.

Nov 6, 2026, 1:06 AM

the silent path: securing unmanaged industrial assets against remote tampering

US authorities have issued warnings regarding an ongoing cyber threat targeting industrial refrigeration systems, raising concerns about potential remote tampering.

Nov 6, 2026, 1:04 AM

beyond the token: addressing session-based lateral movement in modern enterprise

This report highlights active phishing and token theft campaigns, specifically SkyW4lker and Mir0Auth, which exploit Microsoft 365 device-code authentication to compromise US corporate accounts.

Nov 5, 2026, 7:03 PM

the wordpress kev mandate and the necessity of network-layer behavioral analysis

CISA has added a WordPress Core vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation and mandating fixes for federal agencies.

Nov 5, 2026, 11:04 AM

the revolve breach and the shift toward deterministic network defense

Fashion retailer Revolve disclosed a data breach where hackers accessed its e-commerce platform, stealing personal and payment card information from at least 200,000 customers.

Nov 5, 2026, 1:05 AM

vapor panda and the collapse of defense-in-depth: why network-layer visibility is the new perimeter

A China-nexus threat actor known as Vapor Panda used an AI-driven penetration-testing framework to breach over 200 organizations globally, including telecommunications and pharmaceutical firms in the United States.

Nov 5, 2026, 1:04 AM

the florida department of education breach and the collapse of network-layer visibility

The Florida Department of Education suffered a hacking incident resulting in the potential exposure of sensitive data, including Social Security numbers, for a large number of individuals.

Nov 5, 2026, 1:03 AM

the llmjacking crisis: why visibility at layers 2-4 is the only defense against unauthorized compute abuse

Recent investigations have identified a surge in 'LLMJacking' incidents across North American organizations, where attackers exploit legitimate access to enterprise AI resources to generate unauthorized model usage, resulting in significant financial losses.

Nov 4, 2026, 7:05 PM

the sap exploit window and the collapse of patch response time

Security researchers report that attackers are now exploiting newly disclosed SAP vulnerabilities within days, forcing enterprises to drastically accelerate their patch management cycles to prevent ransomware and extortion attempts.

Nov 4, 2026, 7:04 PM

living-off-the-land (lotl)

the nextron technology breach and the collapse of response velocity

Nextron Technology has been targeted by the Aoqin ransomware group in a data breach discovered on November 4, 2026, involving the exfiltration of client and confidential data.

Nov 4, 2026, 11:05 AM

the marketplace compromise: why developer extensions are the new persistence vector

Malicious versions of Anthropic’s Claude Code extension were distributed via the Cursor marketplace, allowing attackers to plant SSH keys and establish persistence on developer machines.

Nov 4, 2026, 1:05 AM

the hidden tax of lmjacking and the collapse of cloud visibility

Google has issued a warning regarding 'LLMjacking' attacks, where threat actors hijack enterprise cloud environments to run unauthorized large language model queries, resulting in massive cloud service bills.

Nov 4, 2026, 1:05 AM

the network reality behind the unm health sciences incident

The University of New Mexico Health Sciences Center reported a cybersecurity incident on October 26 that impacted several end-user devices, though core systems remained unaffected.

Nov 3, 2026, 7:07 PM

the dwell time crisis: agentic threats and the collapse of network visibility

Chainalysis confirmed a data breach where attackers utilized offensive AI-driven agentic techniques to gain unauthorized access to the company's internal systems and tools.

Nov 3, 2026, 7:03 PM

Closing the detection gap on edge device vulnerability exploitation

Enterprise edge devices, including those from Cisco, Fortinet, and Palo Alto, faced a crisis point in October due to a wave of zero-day vulnerabilities. Additionally, the ARTEX AI pentesting framework was confirmed to be used in criminal and nation-state data exfiltration attacks.

Nov 3, 2026, 11:04 AM

the dwell time collapse: hardening networks against lateral breach acceleration

The week of November 2, 2026, saw a surge in high-severity threats including ransomware, nation-state intrusions, and supply-chain backdoors. Organizations are warned that the collapsing patch-to-exploit window makes them vulnerable to cascading lateral breaches.

Nov 3, 2026, 11:03 AM

beyond containment: restoring visibility in the cloud workload corridor

Following a series of major security incidents, Aviatrix launched a new containment platform to help enterprises isolate compromised cloud workloads and prevent lateral movement.

Nov 3, 2026, 1:03 AM

lotl (living-off-the-land)

the extension vulnerability: decoupling network truth from marketplace trust

Recent reports highlight that AI agents are now executing real-world intrusions, while malicious builds of the Claude Code extension were distributed via the Cursor marketplace, leading to unauthorized SSH key installation.

Nov 2, 2026, 7:04 PM

the remote assistance trap: why visibility must shift from endpoints to the network layer

Cyberattackers are increasingly impersonating IT helpdesk personnel via Microsoft Teams to trick employees into granting remote access through Quick Assist, facilitating network compromise.

Nov 2, 2026, 7:03 PM

the silent shift: freezer manipulation and the architecture of blind spots

Grocery retailers in Sweden and Belgium reported sharp temperature increases in freezer systems, with at least one operator attributing the disruption to a cyberattack that manipulated cooling units.

Nov 2, 2026, 7:02 PM

living-off-the-land (lotl)

the dwell time collapse: rethinking visibility after the binance incident

Reports indicate that Binance suffered a significant cyberattack involving approximately $6.3 billion in cryptocurrency, with recovery efforts currently underway.

Nov 2, 2026, 1:06 AM

the dwell time crisis: addressing lateral movement in the wake of the chainalysis incident

Chainalysis confirmed a security incident involving unauthorized access to internal tools via an AI-powered intrusion, resulting in the exposure of customer identity data for enterprise and government clients.

Nov 2, 2026, 1:05 AM

beyond the phish: visibility into lateral movement after the social engineering event at chainalysis

Chainalysis disclosed a security incident involving the exposure of internal data, highlighting the growing risk of agentic AI being used to facilitate spear-phishing and social engineering against enterprises.

Nov 1, 2026, 7:04 PM

Closing the gap on lateral movement in law firm networks

A CrowdStrike report highlights an increase in aggressive cyberattacks against US law firms, with adversaries using techniques like zero-day exploits and password attacks to steal confidential client data.

Nov 1, 2026, 11:05 AM

beyond the perimeter: addressing the ransomware staging gap at danser

The company Danser was listed on the Qilin ransomware group's data-leak site, indicating a potential theft of internal data.

Nov 1, 2026, 11:05 AM

the dwell time crisis: addressing ransomware staging in modern enterprise networks

Evinoks, a manufacturer of hotel and restaurant equipment, was listed on the Barracuda ransomware group's data-leak site.

Nov 1, 2026, 11:05 AM

beyond the exploit: network-layer visibility in the wake of php vulnerability reports

CISA added two critical PHP vulnerabilities to its Known Exploited Vulnerabilities catalog following reports of active scanning and exploitation attempts in enterprise environments.

Oct 31, 2026, 11:06 AM

the silent path: network-layer visibility in the florida department of education breach

The Florida Department of Education reported that a data breach involving the Florida Student Financial Aid website resulted in the exposure of Social Security numbers for 4.9 million individuals.

Oct 31, 2026, 11:04 AM

Closing the visibility gap in the florida department of education breach

The Florida Department of Education reported a significant data breach that potentially impacts the personal information of approximately 4.9 million individuals.

Oct 30, 2026, 7:06 PM

the architecture of persistence: addressing lateral movement in the del monte foods breach

Del Monte Foods Corporation II Inc. filed a data breach notice with the Vermont Attorney General on October 29, 2026, confirming the exposure of sensitive personal information including Social Security numbers.

Oct 30, 2026, 7:06 PM

the silent path to impact: breaking the ransomware staging cycle

The University of New Mexico Health system is managing a cyberattack that resulted in the cancellation of appointments and surgeries after a ransomware group claimed responsibility for the incident.

Oct 30, 2026, 11:06 AM

the velocity of compromise: addressing the reality of living-off-the-land operations

The GoDaddy-owned registrar 123 Reg reported a data breach involving an AI-augmented operation. The company suspects the attack is linked to a Chinese-speaking threat actor previously observed using the ARTEX penetration-testing tool.

Oct 30, 2026, 11:04 AM

the cost of invisibility: moving beyond the perimeter in the wake of the fec incident

The Federal Election Commission (FEC) took its electronic filing system offline after a bad actor attempted to breach its systems, preventing the filing of mandatory campaign finance reports.

Oct 30, 2026, 1:05 AM

Closing the dwell time gap: why visibility matters when credentials are compromised

A new report highlights a 129% increase in malicious activity targeting U.S. law firms, with attackers employing tactics such as physical infiltration to establish remote access and rapid data exfiltration.

Oct 29, 2026, 7:03 PM

autonomous speed and the collapse of the defensive timeline

CrowdStrike identified four threat actors utilizing agentic AI to conduct autonomous cyber intrusions, including reconnaissance and exploitation, against private-sector organizations in the United States and other regions.

Oct 29, 2026, 7:02 PM

beyond the exploit: mapping the supply chain compromise in the era of agentic adversaries

The week saw significant enterprise security challenges, including critical PHP vulnerabilities and a China-aligned campaign by Storm-0940 targeting the ConnectWise supply chain using agentic AI.

Oct 29, 2026, 1:06 AM

the silence before the impact: why lateral visibility determines the dwell time gap

Recent reports highlight a ransomware attack on Richmond Public Schools and a cyberattack on Quest Diagnostics involving its patient test result system, raising concerns about protected health information exposure.

Oct 29, 2026, 1:05 AM

the gap between patch and persistence: CVE-2026-101767 and the reality of network dwell time

Security researchers have observed initial exploitation attempts targeting a critical SQL injection vulnerability (CVE-2026-101767) in Oracle E-Business Suite, just days after a patch was released.

Oct 28, 2026, 7:05 PM

the ghetto of the cloud: network visibility during the gheist campaign

A new threat campaign dubbed 'Gheist' has been identified weaponizing stolen GitHub tokens to gain unauthorized access to enterprise cloud environments and exfiltrate sensitive secrets.

Oct 28, 2026, 1:05 AM

the velocity of exploit: securing the unpatched enterprise

CISA added four vulnerabilities, including the 'Plex2Shell' set, to its Known Exploited Vulnerabilities (KEV) catalog, requiring federal agencies to patch systems actively targeted by attackers.

Oct 28, 2026, 1:05 AM

the architecture of enterprise visibility: lessons from the cartier breach

Luxury brand Cartier has officially notified customers that their personal data was compromised following a recent cyberattack on the company's systems.

Oct 28, 2026, 1:05 AM

the architecture of shadow access: network visibility after the october 2026 incidents

A cluster of cybersecurity incidents throughout October 2026 has highlighted critical gaps in enterprise security, specifically regarding the exposure of private applications to unauthorized users.

Oct 27, 2026, 7:05 PM

the operational cost of dwell time: network visibility after the anmed incident

AnMed, a healthcare provider in the United States, was forced to close several care facilities following a disruptive malware attack.

Oct 27, 2026, 7:03 PM

the silent path: detecting lateral movement after the php exploitation cycle

CISA has added two critical PHP vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming that threat actors are actively exploiting these flaws in the wild.

Oct 27, 2026, 7:03 PM

the architecture of exposure: visibility after the emperador breach

An analysis of the Emperador ransomware attack on AB InBev, which involved an Azure cloud data breach and the exposure of PKI certificates.

Oct 27, 2026, 11:06 AM

the visibility gap in modern software supply chain compromises

Microsoft identified a China-linked group, Storm-0940, using an AI-powered penetration testing framework called ARTEX to compromise the ConnectWise software supply chain and gain privileged access to corporate cloud systems.

Oct 27, 2026, 11:05 AM

the velocity of trust: supply-chain risk after the connectwise compromise

The China-aligned threat group Storm-0940 utilized an AI-powered penetration testing framework called ARTEX to automate a supply-chain attack against ConnectWise cloud applications.

Oct 27, 2026, 1:04 AM

lotl (living-off-the-land)

beyond the payload: neutralizing ransomware staging through network-layer visibility

Pure Grow Diamonds Inc, based in New York, was listed by the N0n ransomware group on October 25, 2026.

Oct 26, 2026, 1:04 AM

the acceleration of the attack lifecycle: why agentic threats require a network-layer shift

An agentic AI-driven campaign successfully breached over 100 companies, including major manufacturers, by leveraging automated AI models to execute attacks at a very low cost.

Oct 26, 2026, 1:04 AM

the inevitable dwell time: why current visibility limits define the LOXONE incident

LOXONE reported an internal cyberattack on October 18, 2026, that impacted its CRM and applicant systems, leading to potential exposure of business partner and applicant data.

Oct 25, 2026, 7:03 PM

Closing the gap between breach discovery and sensitive data movement

Ford Audio-Video Systems, LLC notified Vermont residents of a data breach involving sensitive personal information, including social security numbers, in a filing reported to the state Attorney General.

Oct 25, 2026, 1:03 AM

beyond the breach: exposing the hidden network movement in energy infrastructure

CenterPoint Energy reported a data breach affecting over one million Texas residents, exposing sensitive personal information including Social Security numbers and driver's license data.

Oct 24, 2026, 11:04 AM

the unseen infrastructure: defending the gap between exposed plcs and m365 environments

Attackers have been targeting internet-exposed PLCs in over 30 Minnesota water and wastewater utilities, while separate incidents involving ConnectWise credentials have led to unauthorized access in Microsoft 365 environments.

Oct 24, 2026, 11:04 AM

the k0t campaign: securing the network against the collapse of the detection timeline

A threat actor identified as 'k0t' has been targeting enterprise network edge devices, such as firewalls and VPNs, to steal over 70,000 credentials and move laterally within corporate environments.

Oct 24, 2026, 1:04 AM

beyond the exploit: securing federal infrastructure against zero-day movement

The US government is coordinating with agencies to address critical vulnerabilities in the widely used PHP software that could impact federal agencies and critical infrastructure.

Oct 24, 2026, 1:03 AM

the silent pivot: how california defense contractors highlight the collapse of the detection timeline

Two California government contractors, ETS and Paradigm, were involved in separate data security incidents impacting enterprise-level operations.

Oct 23, 2026, 1:04 AM

the operational cost of visibility: Ahold Delhaize and the collapse of the defense timeline

Dutch grocery giant Ahold Delhaize, which operates major US supermarket chains including Food Lion and Stop & Shop, proactively took IT systems offline following a cyberattack that impacted its operations.

Oct 23, 2026, 1:03 AM

the terminal velocity of autonomous breach: why network speed has outpaced human response

State-sponsored autonomous agent frameworks have executed large-scale infrastructure breaches, signaling a shift where traditional human-speed incident response is becoming obsolete.

Oct 23, 2026, 1:02 AM

beyond the perimeter: understanding staged exfiltration in the toyo tires breach

Toyo Tires, the North American subsidiary of Toyo Tire Corporation, announced a data breach that potentially exposed sensitive personal, financial, and medical information of its customers.

Oct 22, 2026, 7:06 PM

beyond the perimeter: addressing the speed collapse in data exfiltration events

CenterPoint Energy reported a data breach to the Texas Attorney General involving the exposure of personal information, including Social Security numbers and driver's license details, for over 1 million residents.

Oct 22, 2026, 11:06 AM

the ahold delhaize incident and the velocity of network dwell time

Retail giant Ahold Delhaize confirmed that malicious cyber activity caused significant outages across its grocery brands, with restoration efforts for US e-commerce operations expected to take several days.

Oct 22, 2026, 11:05 AM

the september 25 ai-driven campaign and the collapse of network dwell time

Security experts report a surge in cyberattacks driven by new AI models, noting a specific campaign that began on September 25 where AI agents attempted to breach over 1,200 websites.

Oct 21, 2026, 7:03 PM

the city of mt. angel incident and the architecture of staged exfiltration

The City of Mt. Angel, Oregon, was listed by the Booba Team ransomware group, which claims to have stolen 18 GB of data from the government administration.

Oct 21, 2026, 11:04 AM

the boston scientific disruption and the silent cost of dwell time

Boston Scientific confirmed a cyberattack that has caused global operational disruptions, leading the company to warn that it may miss its 2026 financial targets.

Oct 21, 2026, 11:04 AM

the beyondtrust exploit and the mechanics of hidden lateral movement

ConnectWise has suspended cloud services, and a BeyondTrust zero-day vulnerability is being exploited by a Chinese espionage group. Additionally, there is a reported rise in ransomware violence threats.

Oct 19, 2026, 7:04 PM

the ivanti authentication bypass and the cost of invisible lateral movement

Ivanti issued a warning regarding the active exploitation of CVE-2026-104935, an authentication-bypass vulnerability affecting Connect Secure enterprise systems.

Oct 19, 2026, 11:03 AM

beyond the outage: why the bankruptcy noticing center disruption demands network-layer visibility

The Bankruptcy Noticing Center, operated by BAE for the federal judiciary, has been experiencing an outage since October 9 that has halted operations.

Oct 18, 2026, 7:03 PM

the ivanti compromise and the vulnerability of the network perimeter

Threat actors have been observed chaining three zero-day vulnerabilities in Ivanti Connect Secure VPN appliances to gain root access, with only two of the flaws currently patched.

Oct 18, 2026, 7:03 PM

beyond the repository: why meta's github breach reveals a collapse in internal visibility

Meta reported a security incident where hackers accessed internal code and personal data belonging to 1,500 individuals via a breach on GitHub.

Oct 18, 2026, 1:03 AM

beyond the patch cycle: why October 2026 demands a shift in lateral movement visibility

Microsoft released a record-breaking batch of 1,413 vulnerability patches in October 2026, including a zero-day vulnerability that is currently being actively exploited in the wild.

Oct 17, 2026, 7:03 PM

the asos breach and the necessity of network-layer behavioral visibility

A security breach at ASOS has highlighted the inherent risks associated with third-party software-as-a-service (SaaS) applications used in customer-facing operations.

Oct 17, 2026, 11:05 AM

beyond the notice: securing the court transmission pipeline against lateral movement

A cybersecurity incident has disrupted the operations of US federal bankruptcy courts, specifically affecting the system used to produce and transmit bankruptcy notices.

Oct 17, 2026, 1:04 AM

the ivanti breach and the myth of the perimeter patch

Recent zero-day attacks targeting Ivanti ICS have underscored the ongoing challenges enterprises face regarding vendor-supplied security patches and vulnerability management.

Oct 16, 2026, 7:04 PM

beyond the zero-day: shifting the defensive focus from patching to lateral movement detection

Microsoft's October Patch Tuesday release addressed a significant number of vulnerabilities, including several zero-day flaws that were identified as being present in enterprise environments.

Oct 16, 2026, 7:03 PM

the aflac incident: why network dwell time must be the primary metric for enterprise resilience

The insurer Aflac is currently investigating a potential data leak following a recent cyberattack, though it has not yet confirmed if customer information was compromised.

Oct 16, 2026, 11:03 AM

beyond the patch: securing the network against the october 2026 mark of the web exploits

Microsoft released security updates for October 2026 addressing over 1,400 vulnerabilities, including a critical Mark of the Web bypass flaw (CVE-2026-96951) that is currently being exploited by attackers in the wild.

Oct 15, 2026, 1:03 AM

the mark of the web vulnerability: why patching is only the first step in defense

In its October 2026 Patch Tuesday, Microsoft addressed a record-breaking 1,413 security vulnerabilities, specifically highlighting a Windows Shell bug that allows attackers to bypass Mark of the Web security defenses.

Oct 15, 2026, 1:03 AM

the dwell time crisis: reframing the ey data breach through network behavior

A data breach at EY (Ernst & Young) resulted in the exposure of sensitive client information belonging to major financial institutions, including Goldman Sachs and Man Group.

Oct 14, 2026, 7:05 PM

the dwell time collapse: analyzing the fbi and accenture contractor breach

The FBI terminated an Accenture contractor following a security failure that allowed the ShinyHunters group to breach systems and expose sensitive data on thousands of bureau employees.

Oct 14, 2026, 11:08 AM

beyond the perimeter: patching is only the beginning of the sma1000 response

A maximum-severity vulnerability (CVE-2026-102255) in SonicWall SMA1000 devices is currently being exploited in the wild, prompting urgent calls for users to apply patches.

Oct 14, 2026, 11:04 AM

the visibility tax: law firm breaches and the collapse of the defense timeline

Major U.S. law firms Holland & Knight and Squire Patton Boggs LLP reported cyberattacks involving unauthorized access to their systems, with disclosures appearing in state attorney general notifications in early October 2026.

Oct 13, 2026, 1:05 AM

the dwell time collapse: dissecting the KFC incident and the network visibility gap

The ransomware group known as 'thegentlemen' successfully executed a data breach against KFC, which was discovered on October 12, 2026.

Oct 12, 2026, 7:06 PM

the dwell time collapse: why infrastructure seizure is only the start of the visibility fight

The DOJ and FBI successfully seized infrastructure and hacking tools associated with the Flax Typhoon threat actor group.

Oct 11, 2026, 7:03 PM

closing the visibility gap: lessons from the recent federal contractor breach

The FBI terminated a contractor working for Accenture after it was discovered that a failure to apply a security patch led to a data breach within the agency's PeopleSoft system.

Oct 11, 2026, 11:06 AM

the acceleration of compromise: responding to the zero-day velocity shift

New research highlights how AI tools like Claude Mythos can rapidly discover and weaponize zero-day vulnerabilities, significantly accelerating the speed of enterprise cyberattacks.

Oct 10, 2026, 7:03 PM

the dwell time crisis: lessons from the idc frontier ransomware event

A ransomware attack on IDC Frontier resulted in a significant system outage impacting 495 corporate and local government customers.

Oct 9, 2026, 7:04 PM

shifting the defense: addressing the speed collapse in the wake of cve-2026-21589

Hackers have begun actively exploiting CVE-2026-21589, a critical unauthenticated arbitrary file access vulnerability affecting multiple Atlassian Data Center products used in enterprise environments.

Oct 8, 2026, 1:01 AM

Closing the detection gap: why network-layer visibility is the final defense against lateral movement

Austal USA, a military contractor, reported that it mitigated a recent cyberattack on its systems and confirmed that no classified information was compromised during the incident.

Oct 6, 2026, 11:06 AM

the dwell time collapse: why network visibility remains the last line of defense for the enterprise

United Natural Foods (UNFI) confirmed active exploitation of a cyberattack that has impacted its quarterly earnings, with the incident being disclosed in early October 2026.

Oct 5, 2026, 1:03 AM

bridging the visibility gap: securing operational technology against remote code execution

A critical vulnerability (CVSS score 9.8) has been identified in Siemens Programmable Logic Controllers (PLCs) that could allow remote attackers to execute arbitrary code. Siemens has issued an urgent advisory for users to apply firmware updates.

Oct 4, 2026, 11:03 AM

the compression of the attack lifecycle: why legacy visibility is failing the speed test

Microsoft's 2026 Digital Defense Report warns that threat actors are using AI to compress attack lifecycles from days to minutes. The report highlights that government and IT sectors remain the most targeted, with the U.S. experiencing the highest volume of global attacks.

Oct 4, 2026, 11:03 AM

Closing the operational technology visibility gap in critical infrastructure

Recent cyberattacks have targeted water supply systems across multiple U.S. states, compromising operational technology environments. Threat actors reportedly utilized phishing emails to gain initial access to these critical infrastructure systems.

Oct 4, 2026, 11:03 AM

the dwell time collapse: neutralizing the warlock group's lateral movement

The Warlock ransomware group has been identified exploiting Microsoft SharePoint vulnerabilities to gain initial access to large organizations in Spain and Portugal.

Oct 3, 2026, 7:02 PM

the operational reality of the catalyst sd-wan manager vulnerability

Cisco has released security updates to address a critical vulnerability in its Catalyst SD-WAN Manager that is currently being exploited by attackers to gain administrative access.

Oct 1, 2026, 7:04 PM

Closing the visibility gap in high-profile portal infrastructure

The FBI is investigating a cyberattack on its FBIJobs.gov portal after the threat group ShinyHunters claimed to have compromised the system and stolen sensitive data. The incident highlights ongoing supply chain risks for high-profile organizations.

Sep 30, 2026, 11:02 AM

the network-layer necessity in a connected supply chain

A recent report highlights that 77% of cyberattacks now propagate across enterprise systems and third-party vendor networks, emphasizing the growing risk of interconnected supply chains.

Sep 29, 2026, 1:02 AM

Closing the gap on enterprise lateral movement

New research indicates that 86% of multi-location enterprises have suffered cyberattacks, with most incidents spreading across locations due to weak governance and fragmented security infrastructure.

Sep 26, 2026, 11:04 AM

beyond the breach: network-layer truth in the age of supply chain compromise

Recent supply chain attacks have impacted major platforms, including BigCommerce, which confirmed a breach of merchant storefronts, and Brevo, which suffered an attack that injected malicious code into over 100,000 websites. Additionally, the U.S. law firm Greenberg Traurig reported a cyberattack that put sensitive personal data at risk.

Sep 26, 2026, 1:02 AM