New analysis reveals a 180% surge in operational technology attacks as ransomware actors shift focus from data exfiltration to physical disruption — demanding higher ransoms from utilities and manufacturers.
Threat actors are deploying fine-tuned language models to craft hyper-personalised spear-phishing emails at a rate previously impossible. Detection evasion rates have jumped to 94% against legacy email gateways.
A misconfigured REST API left millions of patient records including SSNs and prescription data openly accessible for 78 days. HIPAA penalties could reach $500M as OCR launches formal investigation.
With NIST's PQC standards finalised, only 11% of Fortune 500 companies have begun migration planning. The harvest-now-decrypt-later threat window is rapidly closing — and most security teams aren't ready.
The CRA's enforcement deadline is approaching fast. We break down the key obligations for hardware and software manufacturers, the penalties for non-compliance, and a practical compliance checklist for security teams.
A critical memory corruption bug in GlobalProtect's packet parsing engine enables full system takeover without credentials. Over 95,000 internet-facing instances remain unpatched 48 hours after disclosure.