Agentic remediation automates the mobilization phase of CTEM to eliminate vulnerability backlogs and achieve Shift Zero by enabling autonomous, low-risk fixes under human supervision.
Microsoft is rolling out phishing-resistant passkey support for Entra-protected resources on Windows devices beginning late April, with general availability expected by mid-June 2026.
A newly identified threat actor called BlackFile has been conducting data theft and extortion attacks against retail and hospitality organizations since February 2026, using vishing calls and fake IT helpdesk personas to steal employee credentials.
Home security giant ADT confirmed cybercriminals breached its systems and stole a limited set of customer data, including names, addresses, and partial Social Security numbers. The ShinyHunters group claims to have taken 10 million records and is demanding a ransom.
Microsoft is introducing several Windows Update improvements giving users greater control over update timing and reducing unexpected restart interruptions, now rolling out to Windows Insiders in Dev and Experimental channels.
U.S. and U.K. cybersecurity agencies are warning that a sophisticated backdoor called Firestarter is burrowing into Cisco Firepower and Secure Firewall devices, surviving patches, reboots, and firmware updates through deep hooks into the ASA core process.
House Speaker Mike Johnson introduced a three-year Section 702 reauthorization bill, but civil liberties advocates and conservative privacy groups say its reforms amount to little more than window dressing.
Home security company ADT has confirmed a data breach detected on April 20, 2026, after the ShinyHunters extortion group claimed to have stolen over 10 million customer records and threatened to leak them.
Former NSA director Tim Haugh and cybersecurity veteran Kevin Mandia say Iran's cyber operations resemble criminal activity more than sophisticated state warfare, relying on stolen credentials and information operations rather than novel exploits.
SentinelOne has uncovered Fast16, a Lua-based sabotage malware predating Stuxnet that targeted precision engineering software and bears hallmarks of US state-sponsored development, with confirmed use in a 2005 attack.