Cost of Insider Incidents Surges 20% to Nearly $20m

DTEX claims insider incidents cost $19.5m in 2025, with employee negligence most expensive - Read more

Multi-Tenant API Access: Centralize, Scale, and Secure Your Operations

For teams managing dozens, or even hundreds, of tenants, API access quickly becomes operational overhead. Managed Security Service Providers and large enterprises often find...

Integrating Advanced API Security with Imperva Gateway Environment

As APIs power the majority of modern web applications, implementing robust API security is no longer optional – it’s a critical necessity for data...

InSAT MasterSCADA BUK-TS

View CSAF Summary Successful exploitation of these vulnerabilities may allow remote code execution. The following versions of InSAT MasterSCADA BUK-TS are affected: MasterSCADA BUK-TS vers:all/* (CVE-2026-21410, CVE-2026-22553) CVSS Vendor Equipment Vulnerabilities v3 9.8 InSAT InSAT...

Punchbowl Phishing Attack Explained: How Digital Invites Are Used to Steal Credentials

By: Adriane Andaya, Cofense Phishing Defense CenterIn today's digital age, receiving online invitations to events has become commonplace. Sending and receiving invites has never...

Shorter Certificate Lifetimes and Rate Limits

As previously announced, over the next two years we will be switching the default certificate lifetime from 90 days to 64 days, and then...

Preparing for Russia’s New Generation Warfare in Europe

Executive Summary Since its full-scale invasion of Ukraine in February 2022, Russia has waged what we assess is largely opportunistic, though increasingly aggressive,...

January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office...

January 2026 saw a modest 5% increase in high-impact vulnerabilities, with Recorded Future's Insikt Group® identifying 23 vulnerabilities requiring immediate remediation, up from...

Microsoft Copilot Ignored Sensitivity Labels, Processed Confidential Emails

A code bug blew past every security label in the book… and exposed the fatal flaw in how we govern AI. The post Microsoft Copilot...

Latest article

Threat tactic spotlight: Subdomain takeover

In this blog post you’ll learn how to detect and prevent subdomain takeover – a tactic where threat actors exploit dangling DNS records to...

The Half-Life of Threat Intelligence: When Does an IOC Stop Being Useful? 

The concept of the IOC — the Indicator of Compromise — sits at the operational heart of modern threat detection. Block the IP. Flag...

Best Prime Day Tech Deals: Apple, Bose, Garmin, and More

Shop early Amazon Prime Day tech deals on earbuds, mice, routers, doorbells, headphones, smartwatches, Android phones, and fitness watches. The post Best Prime Day Tech...

SprySOCKS Backdoor Expands From Linux to Windows

China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands - Read more