Botnets powered by residential proxy networks are proliferating, with nearly 60 million victim IP addresses worldwide, according to Lumen's Black Lotus Labs.
CISA has updated Emergency Directive 25-03 to warn that patching vulnerable Cisco firewall devices does not remove the Firestarter backdoor, which infected at least one US federal agency through zero-day exploitation.
NATO's Locked Shields 2026 wrapped up on Friday, bringing together more than 4,000 cybersecurity professionals from 41 countries to defend critical infrastructure against simulated live-fire cyberattacks.
Itron, Inc., a Washington-based utility technology firm serving 7,700 customers across 100 countries, has disclosed that an unauthorized third party breached certain internal systems on April 13, 2026.
As agentic AI systems capable of autonomous action take center stage at RSA Conference 2026, cybersecurity experts argue the most effective defense strategy is straightforward: if it can act, treat it like an identity.
Over 10,500 Zimbra Collaboration Suite servers exposed to the internet are still unpatched against CVE-2025-48700, an actively exploited cross-site scripting flaw. CISA has added the vulnerability to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch within three days.
Canadian authorities have arrested three men in the country's first known criminal case involving an SMS blaster — a rogue device that mimics cell towers to send mass phishing texts and disrupt mobile networks.
The EU's Digital Operational Resilience Act, in force since January 17, 2025, makes credential security a binding regulatory obligation under Article 9 — and financial institutions that cannot prove compliance face direct supervisory consequences.
This week's cybersecurity highlights include unauthorized access to Anthropic's Claude Mythos, Sean Plankey withdrawing his CISA director nomination, and the UK NCSC unveiling a new hardware display-security device called SilentGlass.
Norwegian Prime Minister Jonas Gahr Støre announced plans to introduce legislation banning children under 16 from social media before the end of the year, placing responsibility for age verification on tech companies.