enterprise

Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521)

March 28, 2026

A critical unauthenticated remote code execution vulnerability (CVE-2025-53521) in F5’s BIG-IP Access Policy Manager (APM) solution is under active exploitation, the US …

Your security stack looks fine from the dashboard and that’s the problem

March 25, 2026

One in five enterprise endpoints is operating outside a protected and enforceable state on any given day, according to device telemetry collected across tens of millions of …

Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992)

March 23, 2026

Oracle has released an out-of-band patch for a critical and easily exploitable vulnerability (CVE-2026-21992) in Oracle Identity Manager and Oracle Web Services Manager. The …

Cisco FMC flaw was exploited by Interlock weeks before patch (CVE-2026-20131)

March 20, 2026

A critical vulnerability (CVE-2026-20131) in Cisco Secure Firewall Management Center (FMC) that Cisco disclosed and patched in early March 2026 has been exploited as a …

As AI agents start making purchases, security teams must rethink risk

March 5, 2026

In this Help Net Security interview, Donald Kossmann, CTO at fintech company Chargebacks911, talks about the emerging security, fraud, and governance risks of “agentic …

Over 1,200 IceWarp servers still vulnerable to unauthenticated RCE flaw (CVE-2025-14500)

March 4, 2026

A critical RCE vulnerability (CVE-2025-14500) in IceWarp, an EU-made business communication and collaboration platform, may be exploited by attackers to gain unauthorized …

AI went from assistant to autonomous actor and security never caught up

March 3, 2026

Enterprise AI deployments have shifted from pilot programs to production systems handling customer data, executing business transactions, and integrating with core …

Industrial networks continue to leak onto the internet

February 27, 2026

Industrial operators continue to run remote access portals, building automation servers, and other operational technology services on public IP address ranges. Palo Alto …

Cyber valuations climb as capital concentrates, AI security expands

February 25, 2026

Venture funding in cybersecurity continued to concentrate in large private rounds at the end of 2025, driving valuations higher across stages. Data from DataTribe shows total …

Enterprises are racing to secure agentic AI deployments

February 23, 2026

AI assistants are tied into ticketing systems, source code repositories, chat platforms, and cloud dashboards across many enterprises. In some environments, these systems can …

Attackers keep finding the same gaps in security programs

February 19, 2026

Attackers keep getting in, often through the same predictable weak spots: identity systems, third-party access, and poorly secured perimeter devices. A new threat report from …

China-linked hackers exploited Dell zero-day since 2024 (CVE-2026-22769)

February 18, 2026

A suspected China-linked cyberespionage group has been covertly exploiting a critical zero-day flaw (CVE-2026-22769) in Dell’s RecoverPoint for Virtual Machines software since …