This week's critical vulnerabilities, active threats, and patches you need to apply. Your weekly digest of everything that matters in cybersecurity.
Several vendors shipped fixes for actively-exploited flaws in edge devices and browsers. Prioritize anything internet-facing and anything on CISA's known-exploited list.
Quishing campaigns and help-desk social engineering continued to dominate intrusions; ransomware affiliates kept favoring exposed remote-access services.
Patch velocity on edge and identity systems is the single best predictor of who avoids this week's incidents. Managed clients are already covered by our patch SLAs.
The grammar mistakes that used to betray a phishing email are gone. Generative AI lets attackers write convincing, personalized messages at scale — and your built-in Microsoft 365 filter was not designed to stop them.
AI tools have made it as cheap to attack a five-person firm as a five-hundred-person enterprise. Here is what that shift means for your business and what you can realistically do about it.
A new ransomware strain is using signed Windows drivers to disable Microsoft Defender before encrypting files. Here's how to detect it and what compensating controls to deploy.