The most dangerous security breaches today don’t start with zero-days or nation-state sophistication. They start with something far more mundane: a leaked API key, a forgotten service account, a long-lived token that nobody remembered existed.
On the morning of February 19, 2026, the University of Mississippi Medical Center - Mississippi's only academic medical center - woke up to a healthcare ransomware attack that took down its Epic electronic health records system, its phone lines, and ...
Three new adversary groups began targeting industrial control systems in 2025. That’s the headline finding from Dragos’ 9th Annual Year in Review OT/ICS Cybersecurity Report - and the details behind it should concern anyone responsible for securing ...
In late January 2026, SmarterTools confirmed that the Warlock (also known as Storm-2603) ransomware group breached its network by exploiting an unpatched SmarterMail server. According to the company's Chief Commercial Officer, the incident began on ...
For decades, the DMZ (demilitarized zone) has been treated as a reliable buffer between the internet and “trusted” internal systems. Expose a limited set of services, wrap them in firewalls, monitor traffic, and assume anything that makes it past ...
This blog was updated on January 28, 2026 to reflect new information reported on this attack. On December 29, 2024, almost exactly ten years after Russian hackers blacked out 250,000 Ukrainians in the first-ever cyberattack to take down a power ...
How federal agencies and their contractors can achieve Zero Trust for OT without disrupting mission-critical operations A control systems engineer is handed a mandate to achieve Target Level Zero Trust across an operational technology environment ...
On December 4th, CISA, the NSA, and Canadian Centre for Cyber Security dropped a joint advisory that should have every IT and security leader pulling up their network diagrams. The threat? BRICKSTORM, a sophisticated backdoor attributed to PRC ...
The most dangerous moment in a Zero Trust journey isn't the kickoff. It's the moment 12–18 months in when leaders finally look at what they've built - and realize they've made everything more complicated, and nothing meaningfully more secure.
