Category: Security News
-
Your Threat Intelligence Feed Is Mostly Noise
Every enterprise in 2026 subscribes to one or more commercial threat intelligence feeds. The feeds promise context about who is attacking, what they want, and how they operate. The feeds deliver, in most cases, a firehose of indicators that nobody has time to action.
-
The Cyber Insurance Market Is Breaking
Cyber insurance used to be a hedge. Premiums are up 200 to 400% over the last 4 years. Coverage is down. Exclusions are everywhere. The insurers are pulling out of the market. The market is breaking, and the breaking is going to reshape how companies think about cyber risk.
-
The SEC Cyber Rules Are Forcing Boards to Finally Read the Risk Page
Two years in, the most important cybersecurity regulation of the decade is not from the cybersecurity agencies. It is from the Securities and Exchange Commission.
-
The Honest State of the CVE System in 2026
The CVE system in 2026 sits in a state the security community has been warning about for five years, the state where the volume, the quality, the distribution, the funding all need attention the community has not been able to give.
-
The Cloud Security Shared Responsibility Model Is a Lie
Every cloud provider has a shared responsibility model diagram. The diagrams are clear. The diagrams are also misleading. In practice, the boundary between provider responsibility and customer responsibility is full of grey areas, and the grey areas are where the breaches live.
-
Critical Infrastructure Attacks in 2026: The Patterns
The critical infrastructure attack has stopped being the hypothetical scenario the national security advisor uses to justify the budget. It has become the operational reality the utility operator, the water utility, the hospital network has started to live with.
-
Every Major Data Breach of 2026 Explained in Plain English
A living tracker of the major 2026 data breaches. Per-incident evidence, attack types, attribution and defensive lessons. Updated as disclosures land.
-
Regulatory Enforcement: Q1 2026 in Numbers
The regulators moved from guidance to enforcement in 2025. Q1 2026 was the first full quarter of the new normal. Here is what the numbers actually look like, and what they tell you about what is coming.
-
The CVE Tsunami: When the Database Becomes the Breach
The CVE database in 2026 hit 240,000+ entries, with 28,000+ new CVEs in 2025, with the typical enterprise unable to patch the CVEs at the rate the CVEs come in. The CVE tsunami amounts to the situation where the patching program runs behind the patching demand, the database becomes the breach vector the typical enterprise…
-
Security News Roundup: Q1 2026 in 7 Stories
Q1 2026 was a quarter that refused to be quiet. Seven security stories, each one of them big enough to be the whole quarter, all of them landing inside twelve weeks.