Chargebacks only capture a narrow slice of fraud losses, hiding bigger issues that affect revenue, customer experience, and long-term profitability.
Despite record spending and expanding security teams, breach counts and economic losses keep rising. A San Francisco panel of five security executives identified the flawed assumptions undermining the entire industry.
Authorities across three countries have taken down infrastructure supporting four botnets — Aisuru, Kimwolf, JackSkid, and Mossad — that compromised over three million IoT devices and launched hundreds of thousands of DDoS attacks.
Nearly one in three cyber intrusions now involve valid employee credentials, and AI is making these attacks faster and cheaper than ever. Security teams must fundamentally rethink how they detect and respond to identity-based threats.
CrowdStrike has integrated Microsoft Defender for Endpoint telemetry into its Falcon Next-Gen SIEM, marking a significant shift in the once-adversarial relationship between the two cybersecurity giants.
A new malware-as-a-service platform called Venom Stealer automates every stage of ClickFix-style social engineering attacks, from initial infection to cryptocurrency wallet draining, for as little as $250 a month.
Cisco Talos has uncovered a widespread credential theft campaign by threat cluster UAT-10608, which exploits CVE-2025-55182 in Next.js apps and deploys an automated tool called NEXUS Listener to exfiltrate secrets from at least 766 compromised hosts.
Reddit CISO Frederick Lee and Omdia principal analyst Dave Gruber explain how AI is delivering real value in cybersecurity today — from automating runbooks to accelerating threat intelligence — and what risks organizations must still navigate.
A cybercrime group called TeamPCP has deployed a self-propagating worm that wipes data on systems configured for Iran's timezone or Farsi language, while also conducting supply chain attacks against cloud security tools Trivy and KICS.
A chief medical information officer at San Joaquin General Hospital told RSAC 2026 attendees that preparation and repeated rehearsal—not just downtime playbooks—are what truly determine whether a ransomware attack on a healthcare facility escalates or stabilizes.