Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
Itron, Inc., a Washington-based utility technology firm serving 7,700 customers across 100 countries, has disclosed that an unauthorized third party breached certain internal systems on April 13, 2026.
As agentic AI systems capable of autonomous action take center stage at RSA Conference 2026, cybersecurity experts argue the most effective defense strategy is straightforward: if it can act, treat it like an identity.
Over 10,500 Zimbra Collaboration Suite servers exposed to the internet are still unpatched against CVE-2025-48700, an actively exploited cross-site scripting flaw. CISA has added the vulnerability to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch within three days.
Canadian authorities have arrested three men in the country's first known criminal case involving an SMS blaster — a rogue device that mimics cell towers to send mass phishing texts and disrupt mobile networks.
The EU's Digital Operational Resilience Act, in force since January 17, 2025, makes credential security a binding regulatory obligation under Article 9 — and financial institutions that cannot prove compliance face direct supervisory consequences.
This week's cybersecurity highlights include unauthorized access to Anthropic's Claude Mythos, Sean Plankey withdrawing his CISA director nomination, and the UK NCSC unveiling a new hardware display-security device called SilentGlass.
Norwegian Prime Minister Jonas Gahr Støre announced plans to introduce legislation banning children under 16 from social media before the end of the year, placing responsibility for age verification on tech companies.
A newly disclosed vulnerability tracked as CVE-2026-41651, dubbed 'Pack2TheRoot,' allows local Linux users to gain root privileges through the PackageKit daemon. The high-severity flaw has existed for nearly 12 years and affects numerous popular distributions.
A threat group tracked as UNC6692 is leveraging Microsoft Teams impersonation and email bombing to deliver a sophisticated custom malware suite called 'Snow,' designed for deep network compromise and credential theft.