Most ransomware playbooks don't address machine credentials. Attackers know it.

The gap between ransomware threats and the defenses meant to stop them is getting worse, not better. Ivanti’s 2026 State of Cybersecurity Report found that the preparedness gap widened by an average [...]

Attackers cracked 75,000 Fortinet firewalls with old passwords, not a zero-day

Security researchers have uncovered a sprawling cache of stolen credentials for Fortinet firewalls, exposing login details for tens of thousands of organisations around the world. The dataset, dubbed [...]

New UK law would ban ransomware payments by publicly funded orgs

The British government has announced plans to move forward with a law that would bar public organizations from paying off ransomware attackers. The proposed legislation would add schools, town council [...]

Adversaries hijacked AI security tools at 90+ organizations. The next wave has write access to the firewall

Adversaries injected malicious prompts into legitimate AI tools at more than 90 organizations in 2025, stealing credentials and cryptocurrency. Every one of those compromised tools could read data, an [...]

LockBit ransomware gang gets hacked, leak exposes negotiations with victims

"Don't do crime, crime is bad," someone tells LockBit as they leak sensitive data. [...]

Intel Foundry lands its first named outside customer: Fortinet

The two companies announced a strategic collaboration to build the Fortinet Security Processor 6, the custom silicon inside its FortiGate firewalls. Intel will handle the chip design, advanced packagi [...]

US, UK crack down on Russian bulletproof hosting service ZServers for LockBit partnership

ZServers was helping facilitiate LockBit attacks, law enforcement says. [...]

LockBit malware is back - and nastier than ever, experts claim

New LockBit malware sports cross-platform capabilities and improved obfuscation techniques. [...]

Hybrid cloud security must be rebuilt for an AI war it was never designed to fight

Hybrid cloud security was built before the current era of automated, machine-based cyberattacks that take just milliseconds to execute and minutes to deliver devastating impacts to infrastructure. The [...]