Search the Cybersecurity & Threat Intelligence desk archive.
Attackers began attempting to exploit a newly disclosed OpenSSH vulnerability within hours of its disclosure, according to Previdian. The flaw, tracked as CVE-2026-123158 with a CVSS score of 8.1 and nicknamed SSHole, can allow sign-ins to accounts that have no password set. In at least one honeypot case, exploitation led to root-level access, highlighting how quickly exposed SSH services can
An unknown actor appears to have stolen roughly 69GB of SQL Server backups from the Philippine Overseas Employment Administration in under half an hour. The data likely includes sensitive information on migrant workers, raising concerns about privacy, identity theft, and the exposure of a vulnerable population. The speed of the apparent exfiltration also points to serious weaknesses in backup security and monitoring at the government agency.
Russian authorities arrested three suspected members of the VasyGrek threat group and dismantled its criminal infrastructure. The group, also tracked as Fluffy Wolf, has targeted Russian and international companies since 2016. The action matters because it disrupts a long-running cybercriminal operation and signals Russian enforcement activity against the group.
A survey of more than 250 CISOs, SOC leaders, and practitioners finds that 40% of security teams now use AI daily, while 56% are testing it and only 4% have no adoption plans. For SOC leaders, the finding signals that AI agents are moving quickly from experimentation toward deployment, making a readiness and maturity check important before wider rollout.
Cyber leaders are being urged to get ahead of emerging AI liability risks by adopting three frameworks centered on rigorous documentation, transparency, and carefully negotiated contracts with AI vendors. The guidance targets CISOs and their organizations, who increasingly bear responsibility for how AI tools are deployed and governed. It matters because unclear vendor terms and thin record-keeping can leave security leaders exposed when AI systems cause harm or fail to meet regulatory expectations.
A security practitioner describes a lightweight threat-modeling exercise that CISOs can run on a whiteboard using only four questions. The approach is pitched as a way to produce a usable threat model with real results while avoiding major spending on tools or consultants. It matters to security leaders because formal threat modeling is often skipped when budgets are tight, leaving teams without a structured view of the risks they actually face.
Mark Weatherford, a security executive at Nvidia, argues that chief information security officers should help business leaders weigh both the benefits and the downsides of AI adoption rather than acting only as technical gatekeepers. He also says the teams actually deploying AI should own the risks that come with it, instead of leaving security to absorb all accountability. The point matters because as AI tools spread across organizations, CISOs are being pulled into strategic decisions that shape how quickly and safely companies adopt the technology.