Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

1Password signs OpenAI open letter calling for collective action on cyber defense

OpenAI’s open letter on collective cyber defense warns that defenders have a limited window to strengthen security. It urges organizations to fix their highest-risk weaknesses, build least privilege and strong access controls, verify fixes, and make agentic identities traceable and accountable.

M365 security was designed to manage one tenant... MSPs manage more.

Microsoft 365 has no shortage of security features. Conditional Access, Defender, Intune, MFA, mailbox controls, identity management, and more give MSPs plenty of tools to secure their customers. What we do (or rather, don’t do) with these tools is what causes issues. These tools and settings must be configured correctly across every tenant, and we need to be sure they stay that way.

How Owners Can Protect Their Time While Growing Their Investments

Owning rental property is one of those wealth-building moves that sounds simple from the outside. Buy the property, rent it out, collect checks, repeat. Then reality shows up with a leaking faucet, a late rent payment, three vendor texts, and a lease renewal you forgot was due Friday.

How Medical Dictation Technology Can Save You Time Without Creating New Risks

Healthcare professionals spend countless hours documenting care, often long after the patient interaction has ended. Between clinical notes, treatment plans, referrals, and compliance requirements, documentation can become one of the most time-consuming parts of the job. Medical dictation technology offers a way to reduce that burden by turning spoken information into structured records. However, saving time only matters when accuracy, privacy, and workflow compatibility remain intact.

Autonomous Pentesting for SaaS Companies in 2026: The Complete Guide

You ship to production every day while your last pentest happened 11 months ago. Just say that sentence out loud, and we ought to rest our entire case of autonomous pentesting for SaaS companies right there. Everything below is just the supporting evidence. The mismatch isn’t subtle. Your engineers deploy continuously, your infrastructure reshapes itself weekly, and your security validation still runs on a calendar designed for software that shipped twice a year.

Voice Phishing Attacks Target Hedge Fund Employees

Google’s Threat Intelligence Group (GTIG) is tracking a voice phishing (vishing) campaign that’s targeting hedge funds and financial firms. The researchers attribute the attacks to “UNC6671,” an extortion group formerly known as “BlackFile.” The attackers pose as IT staff informing employees of urgent, mandatory migrations.

Warning: Malicious AI Tools Are Spreading in the Criminal Underground

Criminals are now selling malicious AI tools for use in cyberattacks, according to researchers at Trellix. These tools dramatically lower the barrier for unskilled crooks to launch sophisticated attacks. “In the first half of 2026, the Trellix research team identified multiple distinct AI-related offerings across major underground forums,” the researchers write.

The CRA Deadline You Can't Ignore: What Every Company Needs to Fix Before September 2026

The EU Cyber Resilience Act (CRA) introduces a 24-hour reporting requirement for actively exploited vulnerabilities from September 11, 2026. For companies selling products with digital elements into the EU, meeting that deadline will require more than compliance documentation — it demands fast vulnerability identification, clear ownership, reliable SBOM visibility, and a remediation process that can move quickly.

How to improve your cyber maturity

Most organisations that get hit by a serious cyber attack weren’t careless: Ransomware, supply chain attacks and identity-based breaches aren’t hypothetical risks anymore. They happen to businesses and public sector organisations of every size, across every sector. And the ones that come through them best aren’t necessarily those with the biggest security budgets.