enterprise

Poisoned “Office 365” search results lead to stolen paychecks

April 10, 2026

A financially motivated hacking group is targeting Canadian employees with a sophisticated campaign designed to covertly redirect their salary payments into …

FortiClient EMS zero-day exploited, emergency hotfixes available (CVE-2026-35616)

April 4, 2026

Defused Cyber has spotted a critical Fortinet FortiClient Endpoint Management Server (EMS) zero-day vulnerability (CVE-2026-35616) being exploited in the wild. This time …

Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643)

March 30, 2026

A critical SQL injection vulnerability (CVE-2026-21643) in Fortinet FortiClient Endpoint Management Server (EMS), a management server for FortiClient endpoint agents on …

Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521)

March 28, 2026

A critical unauthenticated remote code execution vulnerability (CVE-2025-53521) in F5’s BIG-IP Access Policy Manager (APM) solution is under active exploitation, the US …

Your security stack looks fine from the dashboard and that’s the problem

March 25, 2026

One in five enterprise endpoints is operating outside a protected and enforceable state on any given day, according to device telemetry collected across tens of millions of …

Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992)

March 23, 2026

Oracle has released an out-of-band patch for a critical and easily exploitable vulnerability (CVE-2026-21992) in Oracle Identity Manager and Oracle Web Services Manager. The …

Cisco FMC flaw was exploited by Interlock weeks before patch (CVE-2026-20131)

March 20, 2026

A critical vulnerability (CVE-2026-20131) in Cisco Secure Firewall Management Center (FMC) that Cisco disclosed and patched in early March 2026 has been exploited as a …

As AI agents start making purchases, security teams must rethink risk

March 5, 2026

In this Help Net Security interview, Donald Kossmann, CTO at fintech company Chargebacks911, talks about the emerging security, fraud, and governance risks of “agentic …

Over 1,200 IceWarp servers still vulnerable to unauthenticated RCE flaw (CVE-2025-14500)

March 4, 2026

A critical RCE vulnerability (CVE-2025-14500) in IceWarp, an EU-made business communication and collaboration platform, may be exploited by attackers to gain unauthorized …

AI went from assistant to autonomous actor and security never caught up

March 3, 2026

Enterprise AI deployments have shifted from pilot programs to production systems handling customer data, executing business transactions, and integrating with core …

Industrial networks continue to leak onto the internet

February 27, 2026

Industrial operators continue to run remote access portals, building automation servers, and other operational technology services on public IP address ranges. Palo Alto …

Cyber valuations climb as capital concentrates, AI security expands

February 25, 2026

Venture funding in cybersecurity continued to concentrate in large private rounds at the end of 2025, driving valuations higher across stages. Data from DataTribe shows total …