Threats & Vulnerabilities: Page

What to know about deepfake phishing simulation software

Deepfake phishing simulation software uses AI to probe organizational resistance to state-of-the-art social engineering attacks. Learn why they should be on CISOs' radar.

By John Burke • July 29, 2026

OpenAI models escape containment, hack Hugging Face

In an unprecedented -- and unintended -- cyberattack, frontier AI models autonomously escaped their contained testing environment and breached another company's systems.

By Richard Livingston • July 23, 2026

OpenClaw security best practices for CISOs

OpenClaw introduces huge risks to enterprises, but employee adoption might be inevitable -- whether CISOs sanction it or not. Here's how to enable safer deployments.

By Matthew Smith • July 22, 2026

Industry reacts to Gold Eagle vulnerability management plan

As AI-discovered software vulnerabilities accumulate at an unprecedented pace, security pros say they hope Gold Eagle creates some order from the chaos.

By Phil Sweeney • July 17, 2026

Building cyber-resilient AI in the enterprise

AI attacks and breaches hit differently than traditional attacks, and therefore require more than traditional controls. The best defense requires planning for cyber-resilience.

By Amy DeCarlo • July 14, 2026

ClickFix and removable media lead malware delivery methods

Now more than ever, defenders must look for suspicious behavior, not specific malware. Learn how to defend against two trending initial access methods.

By Alissa Irei • July 10, 2026

Edtech gets schooled by third-party cyberthreats

Why are educational institutions easy targets for cybercriminals? Uncover the reality of edtech security, recent breaches and what schools must do.

By Sharon Shea • July 10, 2026

First fully agentic ransomware attack sparks readiness concerns

An AI model's autonomous execution of a complete ransomware operation marks a new era. Learn why experts say rapid detection and response, not revolutionary defenses, are key.

By Craig Galbraith • July 8, 2026

The OpenClaw security risks every CISO needs to know

The business case for OpenClaw is clear, but so are the security risks. Learn why a cybersecurity expert says deployments are putting enterprises in real danger.

By Matthew Smith • June 17, 2026

The prosecution gap: Why cybercrimes go unpunished

Are cybersecurity criminals simply acting with impunity? It sometimes feels like it. Learn what defenders need to know and what investigators are doing about it.

By Sean Kerner • June 11, 2026

AI in cyberdefense: Learning from threat actors’ playbooks

At the Gartner Cybersecurity and Risk Management Summit 2026, security professionals learned how to use AI to counter the AI-fueled cyberattacks directed against them.

By Richard Livingston • June 10, 2026

FTX scam explained: Everything you need to know

Cryptocurrency values rose in 2021 but started to decline in 2022, causing some exchange platforms to fold. FTX appeared to stay strong -- until news broke of an elaborate scam.

By Amanda Hetler • June 9, 2026

Inside business email compromise attacks: Real-world examples

From tech giants to nonprofits, no organization is immune to trust-eroding business email compromise attacks. Learn more about BEC scams and the fallout when employees get tricked.

By Amanda Scheldt • May 27, 2026

Verizon 2026 DBIR: 6 key takeaways for CISOs

The 2026 DBIR -- practically required reading for CISOs -- identifies critical enterprise security trends, from exploit-driven breaches to shadow AI dangers and third-party risks.

By Sharon Shea • May 22, 2026

News brief: Security worries and warnings as AI use expands

Check out the latest security news from TechTarget SearchSecurity's sister sites, Cybersecurity Dive and Dark Reading.

By Staff report • May 8, 2026

News brief: Critical infrastructure, OT cybersecurity attacks

Check out the latest security news from TechTarget SearchSecurity's sister sites, Cybersecurity Dive and Dark Reading.

By Staff report • May 1, 2026

Cybersecurity in the age of AI means bigger, faster threats

Cybersecurity professionals at SecureWorld Boston had a lot to say about identity management, AI threats and the challenges they face in achieving real-time visibility.

By Phil Sweeney • April 20, 2026

News brief: Iranian cyberattacks target U.S. water, energy

Check out the latest security news from TechTarget SearchSecurity's sister sites, Cybersecurity Dive and Dark Reading.

By Staff report • April 10, 2026

Agentic AI’s role in amplifying and creating insider risks

AI agents might just outdo humans in causing insider risk chaos. From employees using shadow AI to rogue agents, it's time to keep humans and machines in check.

By Sharon Shea • April 7, 2026

News brief: Iran cyberattacks escalate, U.S. targets named

Check out the latest security news from the Informa TechTarget team.

By Staff report • April 3, 2026

News brief: U.S. absence at RSAC sparks leadership concerns

Check out the latest security news from the Informa TechTarget team.

By Staff report • March 27, 2026

News brief: Stryker recovering after large-scale cyberattack

Check out the latest security news from the Informa TechTarget team.

By Staff report • March 20, 2026

What AI zero days mean for enterprise cybersecurity

AI's ability to find and exploit high-severity zero days at speed and scale presents both attackers and defenders with game-changing opportunity. Here's what CISOs should know.

By Ashwin Krishnan • March 19, 2026

News brief: Risk of Iran-backed cyberattacks rising in U.S.

Check out the latest security news from the Informa TechTarget team.

By Staff report • March 13, 2026

News brief: Strikes on Iran put cybersecurity teams on alert

Check out the latest security news from the Informa TechTarget team.

By Staff report • March 6, 2026