Page 3 of 20
Attackers breached Vercel by compromising Context.ai's Google Workspace OAuth application, stealing an employee's credentials and accessing customer data. The attack vector — a trusted third-party AI tool with OAuth access to enterprise systems — is present in thousands of organizations.
Q1 2026 ransomware data confirms manufacturing's sustained crisis: 800+ victims across all sectors, attack volumes holding steady quarter-over-quarter, and a structural shift toward data extortion replacing traditional encryption. Four groups — RansomHub, SafePay, Akira, and Qilin — are running the industrial targeting playbook.
Should your organization run local AI models on internal infrastructure or use frontier models from OpenAI, Anthropic, and Google? The answer depends on your data sensitivity, team size, compliance requirements, and risk tolerance. Here's how to think through it — and how to build the AI policy that governs whichever path you choose.
Shadow AI has surged to 76% of organizations in 2026, up from 61% a year ago. AI agents now autonomously control IoT devices, access operational systems, and make decisions without security oversight. The result is a new category of unmanaged attack surface that most enterprise security teams aren't equipped to handle.
Microsoft's April 2026 Patch Tuesday addressed 165 vulnerabilities — including actively exploited SharePoint zero-days and, for the first time, AI prompt injection vulnerabilities in Microsoft 365 Copilot. The AI attack surface is officially on the patch list.
North Korean threat actors compromised the axios npm package — used in 100 million JavaScript projects weekly — through a hijacked maintainer account, delivering a cross-platform RAT in under an hour. For IoT and embedded device builders, it's a wake-up call about firmware supply chain risk.
22% of healthcare organizations have experienced cyberattacks that directly impacted medical devices, with three-quarters of those incidents disrupting patient care. As IoMT deployments surpass 7 million devices in smart hospitals, the attack surface is growing faster than the defenses.
Millions of internet-connected solar inverters, battery storage systems, and smart meters now form the most distributed attack surface on the power grid. Security researchers have identified critical vulnerabilities that could allow remote manipulation of grid-edge devices at scale.
Should your smart office run on Home Assistant, Frigate, and open-source access control — or on Verkada, Lenel, and Cisco Meraki? This is the real comparison: cost, control, privacy, security, and what actually works when you're running an office of 5 to 500 people.
Security researchers have exposed Masjesu, a sophisticated IoT botnet sold as a DDoS-for-hire service on Telegram. It targets routers and gateways across ARM, MIPS, and AMD64 architectures — and has begun extorting smart manufacturing operations.
A joint CISA advisory from six federal agencies confirms Iranian-affiliated hackers are exploiting internet-exposed Rockwell Automation PLCs across US water, energy, and municipal systems — without needing a single exploit.
New research quantifies the scale of the manufacturing cyber crisis — and reveals the single most dangerous gap: leadership treating cybersecurity as an IT problem rather than a business risk. Here's what business leaders and IT managers need to understand, and what to do about it.