No Longer Invisible: When Cyber Attacks Go Physical
Back on May 11, 2026, Polish ABW (the country’s internal security agency) warned the world that cyber attacks were "shifting...
2026
Gartner EPP MQ-17
Sophos has been named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. This marks the 17th consecutive...
GitHub internal repositories breached
Update May 22, 2026 1420 UTC:Added additional protection information.Updated hash value for IOC relating to index.js (the previous hash, a68dd1e6a6e35ec3771e1f94fe796f55dfe65a2b94560516ff4ac189390dfa1c,...
Identity for the Machine Age: A CISO’s Framework for Agentic AI Governance (2026 Edition)
Last Updated: 30 April 2026 Identity for the Machine Age: A CISO’s Framework for Agentic AI Governance In 2026, one...
Cybersecurity Leadership in 2026: Why Gartner’s Three Pillars Aren’t Enough
Published: 18 May 2026 Cybersecurity Leadership in 2026: Why Gartner’s Three Pillars Aren’t Enough CISO Leadership · 2026 Influence, agility,...
Weekly Update 505
24 May 2026 Well, that didn't last long! Recording this on Saturday morning my time, I observed ShinyHunters having gone...
Weekly Update 504
18 May 2026 It's a hot topic, the old "pay or don't pay" for hackers not to leak your data....
Welcoming the Bahamian Government to Have I Been Pwned
14 May 2026 Today, we welcome the 44th government onboarded to Have I Been Pwned’s free gov service: The Bahamas....
Welcoming the Bangladesh Government to Have I Been Pwned
12 May 2026 Today, we welcome the 43rd government onboarded to Have I Been Pwned's free gov service, Bangladesh. The...
Welcoming the Costa Rican Government to Have I Been Pwned
11 May 2026 Today, we welcome the 42nd government onboarded to Have I Been Pwned’s free gov service: Costa Rica.The...
New Verizon Report Reveals the Security Gap Attackers Are Exploiting Most
The 2026 Verizon Data Breach Investigations Report (DBIR) paints a clearer picture of today’s cybersecurity landscape: attackers are moving faster,...
Grafana GitHub Breach Exposes Source Code via TanStack npm Attack
Ravie LakshmananMay 20, 2026Supply Chain Attack / Cloud Security Grafana Labs, on May 19, 2026, said an investigation into its...
The New Phishing Click: How OAuth Consent Bypasses MFA
In February 2026, a phishing-as-a-service (PhaaS) platform called EvilTokens went live. Within five weeks, it had compromised more than 340...
Sophos Leader KuppingerCole MDR 2026
Sophos has been named an Overall Leader in the 2026 KuppingerCole Analysts Leadership Compass for Managed Detection and Response (MDR)....
What Is the Instructure Canvas Breach? Impact, Risks, and What Institutions Should Do
Summary In May 2026, SHADOW-AETHER-015 exposed data from 8,809 Canvas customers across 50 countries in what appears to be a...
