The EU CRA – Treating Cybersecurity as Product Liability
For years, cybersecurity law has mostly behaved like tort law after a car crash. It asked who got hurt,...
asked
Decentralized Identity and Verifiable Credentials: The Enterprise Playbook 2026
A patient walks into a new hospital. At the front desk, they are asked to fill in their insurance...
What Boards Must Demand in the Age of AI-Automated Exploitation
“You knew, and you could have acted. Why didn’t you?” This is the question you do not want to be...
SANDWORM_MODE: The Rise of Adaptive Supply Chain Worms
Earlier this year, we asked our team where they expect open source cyberattacks to go next. Sonatype Principal Security...
SANDWORM_MODE: The Rise of Adaptive Supply Chain Worms
Earlier this year, we asked our team where they expect open source cyberattacks to go next. Sonatype Principal Security...
Mobile app permissions (still) matter more than you may think
Mobile Security Start using a new app and you’ll often be asked to grant it permissions. But blindly accepting them...
Eeny, meeny, miny, moe? How ransomware operators choose victims
Counter Threat Unit™ (CTU) researchers are frequently asked about ransomware groups posing a threat to organizations in specific verticals or...
