Latest

Access Management

JumpCloud Grows Presence in Brazil With MSP MacSolution Buy

Michael Novinson  •  January 8, 2026

JumpCloud has acquired MacSolution, a longtime partner and its largest MSP in the Americas, to enhance global service delivery and deepen its IT modernization capabilities. The move positions Sao Paulo, Brazil, as a strategic hub and strengthens support for partners and customers in Latin America.

Governance & Risk Management

Threats to Critical Infrastructure Expected to Intensify

Tony Morbin  •  January 6, 2026

Attacks against critical infrastructure are expected to increase in scope and intensity including hacks on operational technology systems. State actors are now looking for ways to cause damage and disrupt operations, rather than simply steal secrets, according to cybersecurity experts.

Encryption & Key Management

Why 47-Day TLS and SSL Certificate Renewal Cycles Alarm CIOs

Sandhya Michu  •  January 2, 2026

Moving to 47-day TLS and SSL certificate renewal cycles by 2029 will turn certificate management into an enterprise risk. "Automation and crypto-governance are now board-level imperatives. Enterprises can prepare for continuous renewal cycles without losing resilience," says Sectigo CEO Kevin Weiss.

Cybercrime

2025 in Health Data Breaches and Predictions for 2026

Marianne Kolbasuk McGee  •  December 30, 2025

If 2025 lacked a signature attack, hundreds of hospitals, health systems, clinics, physician practices, business associates and other vendors nonetheless experienced breaches in 2025 that cumulatively affected tens of millions of Americans. Hackers will try again harder in 2026.

Endpoint Security

Implantable Brain Devices: Top Cyber and Privacy Concerns

Marianne Kolbasuk McGee  •  December 26, 2025

Implantable brain devices introduce a new and significantly more complex class of cybersecurity risk and critical privacy concerns, compared with traditional medical devices, given the sensitivity of neural data, says Professor Kevin Fu of the Archimedes Center at Northeastern University.

Identity & Access Management

Cyderes Bets on Lucidum to Drive AI-Backed Identity Security

Michael Novinson  •  December 16, 2025

Cyderes has acquired Lucidum to expand its identity threat detection capabilities. Lucidum’s unique tagging and data integration will strengthen Cyderes' AI engine, enabling earlier detection of threats and human risk-based response by unifying off-SIEM telemetry with identity data.

Next-Generation Technologies & Secure Development

Silent Push Buy of Hyas Unlocks Traffic Origin Detection

Michael Novinson  •  December 15, 2025

Silent Push has acquired threat intelligence firm Hyas to strengthen its reach into government cybersecurity markets and improve visibility into adversary infrastructure. The deal includes all Hyas staff and enables the January launch of a tool for tracing proxy traffic back to its true source.

Advanced SOC Operations / CSOC

Harness Nets $240M at $5.5B Valuation to Advance DevSecOps

Michael Novinson  •  December 11, 2025

With $200 million in Series E funding and a new $5.5 billion valuation, Harness will scale its AI-powered platform for security, compliance and reliability in software development. The investment will support R&D into AI agents, testing, cost optimization and security for AI workloads.

Endpoint Security

The Unseen Threat: DNA as Malware

Maryam Shoraka  •  December 10, 2025

Researchers demonstrated that it is feasible to encode executable payloads into synthetic DNA that, once sequenced and processed, could trigger malware in sequencing software. When a vulnerability in a sequencer becomes a vulnerability in national health or food security, the stakes are existential.

Fraud Management & Cybercrime

Checkmarx Purchases Tromzo to Boost AI Security Automation

Michael Novinson  •  December 9, 2025

Checkmarx acquired AI security startup Tromzo to jumpstart its roadmap for agentic application security. The deal gives Checkmarx a ready-built platform and team focused on enterprise-grade triage and remediation agents designed to streamline vulnerability management.

Endpoint Security

CISA Warns of Severe Flaws in Nuclear Med Tracking Software

Marianne Kolbasuk McGee  •  December 3, 2025

U.S. federal authorities are warning that several high-severity vulnerabilities discovered in Mirion Medical Co. inventory tracking software used by nuclear medicine departments could allow attackers to modify program executables and gain access to sensitive information.

Iran Hackers Take Inspiration From Snake Video Game

David Perera  •  December 2, 2025

Iranian nation-state hackers took inspiration from a mobile phone time-killing mainstay, say security researchers who spotted hackers downloading malware masquerading as the Snake video game. A callback to the game isn't nostalgia, say researchers at Eset.