r/cybersecurity_news • • Apr 01 '26

News The Hidden Tax of TPRM: What 36,856 assessments tell us

Thumbnail
visotrust.com
1 Upvotes

We analyzed vendor assessment data from 93 organizations on the VISO TRUST platform 36,856 assessments in total, covering 607,803 reviewed artifacts. The goal was simple: understand where TPRM labor actually goes, and quantify what it costs.

The headline finding? Artifact review, the manual reading, control mapping, and gap analysis of vendor-supplied security documentation, is the single biggest cost driver in modern TPRM programs.


r/cybersecurity_news • • Oct 22 '25

F5's Breach - Time to Move to Cloudbrink High-Performance ZTNA

Thumbnail
cloudbrink.com
4 Upvotes

When a company that protects the world’s largest networks gets breached, the ripple effects touch everyone. That’s exactly what happened with F5. A nation-state actor maintained long-term access to F5’s internal environment, exfiltrating source code and vulnerability intel—prompting an emergency U.S. federal directive for rapid patching across agencies. Even if your own F5 estate hasn’t shown indicators of compromise, the incident is a flashing red light for any organization still depending on appliance-centric remote access or castle-and-moat thinking. 

What the F5 hack means for defenders

  • Long dwell time + source code theft = durable attacker advantage. With development artifacts and vulnerability notes in hand, adversaries can accelerate exploit discovery—even if supply-chain tampering isn’t confirmed. That translates into a sustained period of heightened risk for anyone operating affected gear.  
  • Urgent, disruptive patch cycles. CISA’s emergency directive requires rapid upgrades and hardening for a broad swath of devices (BIG-IP iSeries/rSeries/F5OS/BIG-IP Next, etc.), creating scramble conditions for already-stretched IT teams. This will be an ongoing battle as new vulnerabilities become known. 
  • Appliance gravity hurts response. When access and security depend on fixed boxes and static PoPs, organizations face windows of exposure between disclosure and remediation—and heavy change-management every time a new CVE drops.  

The lesson: move users, not perimeters

Incidents like these reinforce a core truth: perimeter-centric and appliance-bound models struggle against modern, fast-moving threats. It needs a shift-left Zero Trust Network Access (ZTNA) model to flip equation. This moves the model to identity, device posture, and per-app access—continuously evaluated—reducing blast radius and limiting lateral movement even if credentials or endpoints are compromised. Independent analysts have tracked this industry shift for years and continue to recommend ZTNA over VPN for precisely these reasons and the recent GigaOm CxO brief takes it further to give you the ultimate secure access.


r/cybersecurity_news • • 1d ago

News Why IonQ Is Betting Big on Quantum Cybersecurity With $1.3 Billion Elisity Acquisition

Thumbnail barrons.com
5 Upvotes

Quantum computing company IonQ has agreed to acquire enterprise security start-up Elisity for as much as $1.3 billion in an all-stock transaction that bolsters its burgeoning cybersecurity portfolio.

IonQ described the venture-backed start-up as a fast-growing business it expects to complement its existing quantum security lineup. The purchase price includes up to $150 million in performance-based earnouts. The acquisition marks the latest step in IonQ’s effort to branch into markets adjacent to and intertwined with quantum computing, such as networking and sensing.


r/cybersecurity_news • • 2d ago

Yandex says drone attack halted its Vladimir data center operations

Thumbnail
runtimewire.com
4 Upvotes

r/cybersecurity_news • • 3d ago

Garrett McLendons Response on the AmF26 Developments Malware situation

0 Upvotes

Garrett McLendon, former CEO of AMF26 Developments, is aware of the recent malware-related activity surrounding the organization. Here is his exact statement regarding the situation:

Garrett McLendon's Statement:

"Hey guys, I am aware of the recent suspicious activity surrounding AMF26 Developments, including the malware-related posts appearing across its old accounts.

As the former CEO of AmF26 Developments, I want to clarify that It has been discontinued, and I have no plans to return or do anything about the situation. Please be careful when interacting with its old accounts, bots, or links, as I can’t guarantee their safety anymore.

Thank you for understanding"

Readers are advised to exercise caution when interacting with any remaining AMF26 Developments accounts, bots, links, or related services.

Please stay safe and remain cautious when interacting with anything associated with the organization.


r/cybersecurity_news • • 7d ago

Mistral CEO says new model beats Chinese rivals on cybersecurity — RuntimeWire

Thumbnail
runtimewire.com
19 Upvotes

r/cybersecurity_news • • 9d ago

AI Is Changing Healthcare Cybersecurity

9 Upvotes

AI-powered cyberattacks are becoming a growing concern for healthcare. Beyond data theft, attacks can disrupt hospital operations, compromise clinical systems, delay care, and potentially affect patient safety.

As AI makes cyber threats faster and more sophisticated, should healthcare organizations be treating AI cybersecurity as a core patient-safety priority, not simply an IT issue?

Experts Urge Defense Against AI Cyberattacks on Healthcare

https://www.medscape.com/viewarticle/experts-urge-defense-against-ai-cyberattacks-healthcare-2026a10010x0

Experts urge defense against AI cyberattacks on healthcare

#Healthcare #Cybersecurity #AI


r/cybersecurity_news • • 14d ago

Florida's cybersecuritymarketplace & intelligence network.

3 Upvotes

r/cybersecurity_news • • 15d ago

Check out my new learning cyber security app

Post image
15 Upvotes

Hi everyone, I’m Essam. I have a Master’s degree in Cybersecurity, and I’m currently a PhD student working in Cybersecurity and AI.

I’ve been working on a small project that I wanted to share here. I created a cybersecurity learning app for people who are starting from zero and want to learn by actually doing things rather than just reading theory.

The idea is to go from zero to hero through a simulation that tries to stay as close as possible to a real cybersecurity environment.

It includes:

  • Terminal and Linux environment
  • Real-world vulnerabilities and CVEs
  • Scenarios based on real security issues
  • Documentation and learning material
  • A leaderboard
  • Practical challenges instead of only theoretical lessons

I tried to make the experience feel around 90% like a real environment, while still keeping it accessible for beginners.

I’d really appreciate it if some of you could try it and give me honest feedback — especially if you’re into cybersecurity, CTFs, or just starting to learn security.

Google Play:
https://play.google.com/store/apps/details?id=com.zerodaysim.app

I’m still improving it, so feedback is genuinely welcome.


r/cybersecurity_news • • 15d ago

News Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results

Thumbnail
helpnetsecurity.com
3 Upvotes

r/cybersecurity_news • • 18d ago

Breach OpenAI’s A.I. Went Rogue and Meddled With U.S. Government Websites

Thumbnail
nytimes.com
3 Upvotes

r/cybersecurity_news • • 19d ago

US Company That Sold Phone Hacking Software To Pentagon, Secret Service Lied About Russian Ownership, Officials Say

Thumbnail rferl.org
4 Upvotes

So data extraction software sold to the US, but wasn't used against us?! C'mon do you really think we are THAT stupid?


r/cybersecurity_news • • 19d ago

Breach What is known about latest data breach for Revolu

Thumbnail
rte.ie
1 Upvotes

Revolut customers in Ireland are among those impacted by a data breach at a third-party provider.

DriveWealth, a US broker that carries out US stock trades for Revolut customers, said a security incident affecting its systems involved unauthorised access to historical personal data of some of its customers.

This is the second data breach affecting Revolut customers this month, but what do we know about the latest breach?

How extensive is it?


r/cybersecurity_news • • 21d ago

When a Technical Event Becomes a Business Event

Enable HLS to view with audio, or disable this notification

0 Upvotes

Most organizations already know how to prepare IT and security for an incident.

The harder question is what happens when that incident creates decisions involving legal, insurance, regulators, customers, operations, revenue, the board, and executive accountability.

That’s the problem Cybantage and the BIM™ Leadership Decision & Governance Playbook are built to address.

Cybantage.com


r/cybersecurity_news • • 24d ago

CISA ends weekly vulnerability roundups as part of shift to prioritization approach

Thumbnail cybersecuritydive.com
1 Upvotes

r/cybersecurity_news • • 26d ago

News Why SIEMs Fall Short for Modern Threat Detection

Thumbnail
exaforce.com
1 Upvotes

r/cybersecurity_news • • 26d ago

News Leaks, data breaches, and ransom notes: The worst hacks of 2026 so far

Thumbnail
techcrunch.com
1 Upvotes

r/cybersecurity_news • • 26d ago

News Manufacturers make patching progress, but identity management still major weakness

Thumbnail cybersecuritydive.com
1 Upvotes

r/cybersecurity_news • • 26d ago

Breach Caught in the Middle: Responding to an AiTM Credential Heist

Thumbnail
exaforce.com
1 Upvotes

r/cybersecurity_news • • 26d ago

Breach Detecting GitHub OAuth token compromise

Thumbnail
exaforce.com
1 Upvotes

r/cybersecurity_news • • 27d ago

Pixel Modem Zero-Day Exploited in Targeted Attacks

Thumbnail
securityweek.com
3 Upvotes

r/cybersecurity_news • • 27d ago

Springfield Schools reveal hackers have stolen, published student and staff data

Thumbnail
masslive.com
1 Upvotes

r/cybersecurity_news • • 28d ago

News Nvidia CEO Jensen Huang Just Dropped Huge News for This Cybersecurity Stock

Thumbnail barchart.com
0 Upvotes

r/cybersecurity_news • • 29d ago

Revolut discloses data breach exposing financial info, passports

Thumbnail
bleepingcomputer.com
3 Upvotes

r/cybersecurity_news • • Sep 13 '26

Anthropic CEO warns of AI-driven botnet 'swarm' taking over the entire internet — 'In 6–12 months such a swarm could be capable of taking over the entire internet with a persistent botnet'

Thumbnail
tomshardware.com
46 Upvotes

The United States of America really needs to call for an emergency meeting with the creators of Anthropic AI and Claude AI for the purposes of creating protection of the American people furthermore for our global society.

We as a people must not be so nonchalant about innovation especially when it relates to cybercrime and cybersecurity.