SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

CISA Stories

American Stories

CISA stories

Global Stories

CISA stories

Azul issues security fixes for record OpenJDK flaws
Open source

Azul issues security fixes for record OpenJDK flaws

Enterprises running Java face a heavier patching burden, as 53 flaws in the latest OpenJDK update must be fixed far faster than usual.

By Mara Sugue • 4 min read • 2 days ago
SOCtoberfest: The four habits that stop most attacks - passwords, MFA, phishing and patching
Virtual Private Networks

SOCtoberfest: The four habits that stop most attacks - passwords, MFA, phishing and patching

Even small firms can cut breach risk sharply by enforcing passwords, MFA, phishing checks and patching, CISA says.

By Justin Carter • 7 min read • 3 days ago
Hitachi Vantara wins Common Criteria storage certification
Data Protection

Hitachi Vantara wins Common Criteria storage certification

The accreditation gives government and regulated buyers independent assurance that the VSP One Block platform has met recognised security requirements.

By Joseph Gabriel Lagonsin • 4 min read • This month
SOCtoberfest Kickoff: The 7 Deadly Sins of Cybersecurity Meet CISA's Core Steps
Virtual Private Networks

SOCtoberfest Kickoff: The 7 Deadly Sins of Cybersecurity Meet CISA's Core Steps

SMBs face rising breach risk as the report says seven routine security failings, not advanced malware, drive most attacks, with ransomware in 88% of cases.

By Justin Carter • 5 min read • This month
Akira exploits two-year-old SonicWall flaw, ThreatDown says
Ransomware

Akira exploits two-year-old SonicWall flaw, ThreatDown says

Thousands of exposed SonicWall devices still give Akira ransomware a route in, as patched systems with old credentials remain a live risk.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Rockwell joins Anthropic's Project Glasswing programme
Manufacturing

Rockwell joins Anthropic's Project Glasswing programme

Industrial control systems could be patched faster as Rockwell tests controlled access to Claude Mythos 5 to spot flaws before attackers exploit them.

By Joseph Gabriel Lagonsin • 3 min read • Last month
While you were doomscrolling: Medusa ransomware hits 500+ victims (and your spaghetti sauce might be listening to you)
Endpoint Protection

While you were doomscrolling: Medusa ransomware hits 500+ victims (and your spaghetti sauce might be listening to you)

The FBI says Medusa has now hit more than 500 victims, with hospitals and other critical sectors among those most exposed.

By Jordan Riddles • 6 min read • Last month
Whitepaper links water hacks to telecom cyber risk
Network Infrastructure

Whitepaper links water hacks to telecom cyber risk

With most operators exposed to basic flaws, the paper warns telecom networks could face the same low-effort intrusions seen in US water systems.

By Joseph Gabriel Lagonsin • 4 min read • Last month
BackBox launches Kilter AI for network operations
Disaster Recovery

BackBox launches Kilter AI for network operations

The new layer aims to help network teams prioritise vulnerabilities and automate routine fixes, while keeping human approval in charge.

By Joseph Gabriel Lagonsin • 4 min read • Last month
CISA warns of persistent software flaws in exploits
Ransomware

CISA warns of persistent software flaws in exploits

Known exploited flaws are still being driven by decades-old coding mistakes, leaving critical infrastructure exposed to faster-rising ransomware risk.

By Joseph Gabriel Lagonsin • 6 min read • Last month
Eclypsium flags 1,051 CVEs in infrastructure advisories
Firewalls

Eclypsium flags 1,051 CVEs in infrastructure advisories

Revised guidance and remotely exploitable flaws are heightening the risk of widespread compromise across firewalls, routers and switches.

By Sofiah Nichole Salivio • 4 min read • Sat, 29th Aug 2026
Atsign adds post-quantum crypto to SDKs for legacy data
Data Protection

Atsign adds post-quantum crypto to SDKs for legacy data

Long-lived data could be exposed to harvest-now, decrypt-later attacks, as Atsign bakes NIST-approved quantum-safe algorithms into its SDK layer.

By Sofiah Nichole Salivio • 4 min read • Thu, 27th Aug 2026
FIRST launches VulnOptiCON 2026 in Luxembourg on AI
Data Science

FIRST launches VulnOptiCON 2026 in Luxembourg on AI

Rising disclosure volumes are forcing security teams to predict which flaws attackers will exploit as FIRST broadens its vulnerability conference in Luxembourg.

By Sofiah Nichole Salivio • 4 min read • Tue, 25th Aug 2026
KnowBe4 launches free cyber awareness kit for 2026
Data Protection

KnowBe4 launches free cyber awareness kit for 2026

Organisations preparing October training will get new materials on phishing, deepfakes and reporting from a free package aimed at staff awareness.

By Sean Mitchell • 4 min read • Wed, 12th Aug 2026

Stories from Other Regions

CISA stories

Cyber's failure of imagination relates to the cost of waiting
Ransomware

Cyber's failure of imagination relates to the cost of waiting

Australian organisations are paying millions more when breaches linger, making delayed cyber investment a boardroom problem rather than a technical one.

By Illka Gobius • 5 min read • 4 days ago
Battery energy storage: 6 security questions operators should be asking
Risk & Compliance

Battery energy storage: 6 security questions operators should be asking

A major coordinated attack on UK battery storage could cost the grid GBP £2 billion to GBP £10 billion within five years, Centrii says.

By Rafael Narezzi • 4 min read • Last month
Semperis launches global tour for cyber war documentary
Ransomware

Semperis launches global tour for cyber war documentary

The documentary's global rollout will take its account of cyber attacks on vital services to more than 30 cities, including Sydney.

By Sean Mitchell • 3 min read • Thu, 20th Aug 2026