Amazon’s threat intelligence team reports a Russia-linked hacker group has been targeting critical infrastructure since at least 2021 by exploiting unpatched vulnerabilities in common edge devices. The shift to using known flaws instead of zero-days marks a dangerous and efficient evolution in their
Fortune has identified 25 female executives who are the most credible, near-term contenders for CEO roles at major corporations. The list includes leaders from UPS, JPMorgan Chase, and American Express. Their influence and track record signal a significant shift in the corporate pipeline.
Last year saw a record number of data breaches, exposing millions from companies like Qantas and Oracle. Experts warn that AI-powered hacking tools will make 2026 even more dangerous for both corporations and individuals.
Microsoft is finally disabling the RC4 encryption cipher by default in Windows Server after 26 years. The obsolete algorithm was a key weakness in major breaches, prompting criticism from a US senator. The change will roll out by mid-2026.
The past year saw a relentless wave of cyber-attacks targeting major global brands. The tactics ranged from exploiting zero-days in enterprise software to ransomware that halted production lines.
Denmark has dropped a controversial proposal to ban the use of VPNs to access geo-restricted streaming content. The Culture Minister said the text was “not formulated precisely enough” and has removed the section entirely.
Researchers have found a new Windows zero-day vulnerability that crashes the RasMan service. While a free unofficial patch is available, Microsoft has yet to issue an official fix or even assign a CVE, and a working exploit is already circulating undetected.
Just days after the critical “React2Shell” RCE flaw, researchers have found new high-severity bugs in React Server Components. These allow attackers to hang servers in infinite loops and potentially leak hardcoded source code secrets. Anyone using RSC needs to patch—again.
The UK’s Information Commissioner’s Office has fined LastPass £1.2 million for a devastating 2022 data breach. The penalty notice reveals a shocking chain of failures, from a compromised Plex server to a policy letting staff use the same password for work and personal vaults.
Cybersecurity researchers have uncovered 19 malicious Visual Studio Code extensions in a campaign active since February 2025. The extensions used a modified npm package and a fake PNG file to deploy malware. This highlights the growing threat of supply chain attacks against developers.
