LevelBlue: vulnerability exploitation rose to 14% of initial access
The firm's Q1 figure was 20%, while Verizon's 2026 DBIR put exploitation behind 31% of breaches.
36
- Mentions · 7d4
- Mentions · 30d12
- All mentions25
- First seenSep 1, 2026
- Last mentioned1d ago
Timeline
25 articles · newest firstPHP2Shell cleanup will lag exploitation; Token Security argues identity limits matter more than CVSS
Censys counted 32.5 million internet-facing PHP services on vulnerable versions a week after patching, and CISA added both flaws to its KEV list on October 26.
30
Security questionnaires still gate deals despite weak evidence
The author cites third-party breaches rising from 15% to 30% and urges proof such as audits instead of self-reports.
28
Generative AI is making fake login pages easier to scale
The 2026 Verizon DBIR linked phishing to 44% of the AI-assisted initial-access techniques it examined.
28
Connecticut AG settles with Frontier for $625,000 over 2024 breach
Compromised employee and vendor credentials exposed SSNs of 58,841 Connecticut residents; a class action covers about 750,000 people.
52
The internet’s attack surface moves at very different speeds
Censys says publicly exposed AI software grew 63% in nine months, led by vulnerable n8n hosts.
66
Texas HB 3834 Cybersecurity & AI Training Requirements
Texas HB 3834 and HB 3512 require annual cybersecurity and AI awareness training for covered public employees.
28
Top RCE Vulnerabilities
SOCRadar ranks current remote code execution flaws, noting nine of ten are in CISA's KEV catalog.
58
Automation, AI agents or people? Sorting out who handles each security finding
ArmorCode survey of 200 security leaders finds enterprises struggle to triage findings as AI code outpaces review.
32
NIS2 compliance: 7 low-cost steps to secure credentials
A Passwork-backed guide lists seven low-cost credential controls for starting NIS2 Article 21 compliance.
28
The Credential Layer Is Expanding Faster Than Security Teams Can See It
GitGuardian says secrets sprawl is outpacing visibility as commits, agents, and leaked AI credentials multiply.
36
Criminal recruiters want people on your payroll
Intel 471 found criminals recruiting employees, especially in transport and telecom, to sell insider access.
55
Know Your Enemy: Browser-Based Attack Techniques in 2026
Push Security survey details six dominant browser attack techniques for 2026, including AiTM phishing, ClickFix, OAuth abuse, and session hijacking.
32
Lumma, RedLine and Vidar Infostealers Fuel Cloud Credential Theft Campaigns
Lumma, RedLine, and Vidar steal cloud and developer credentials, enabling session hijacking that bypasses MFA.
62
The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments
Wiz finds Lumma, RedLine, and Vidar dominate infostealer theft of AWS, GitHub, and OpenAI credentials from endpoints.
64
Network Solutions Dark Web Monitoring alerts small businesses to domain-linked data exposure
Network Solutions launched Dark Web Monitoring to warn small businesses when domain-linked data appears in known breaches.
30
Autonomous AI Attacks: The Hugging Face Reality Check
Analysis of OpenAI's rogue evaluation agent that breached Hugging Face shows autonomous AI attacks stay noisy while ClickFix and living-off-the-land dominate real intrusions.
55
Identity Visibility in 2026: The Foundation of Identity Security
Hacker News explainer argues continuous identity visibility—inventory, entitlement mapping, behavioral telemetry—is foundational against credential-based intrusions in multicloud environments.
28
CISO's Expert Guide to Agentic Pentesting for Websites
A new free guide urges CISOs to adopt autonomous AI agents for continuous website pentesting as attackers weaponize vulnerabilities in about five days.
25
The true cost of a ransomware attack, with and without BCDR
Ransomware's true cost averages $5.08 million per incident versus a $139,875 median ransom, and mature BCDR strategies with immutable backups cut downtime and recovery expenses.
20
35 Actionable Password Statistics for Businesses in 2026 | Huntress
Huntress compiles 2026 password statistics showing 94% of 19 billion leaked passwords were reused and 37% of identity threats used stolen credentials.
15
Scytale expands vendor risk management with AI-powered TPRM tools
Scytale launched AI-powered third-party risk management in its Vendors module, automating vendor discovery, risk scoring, and continuous vendor posture monitoring.
20
Keepnet launches free SMS/Call Reporter for iOS
Keepnet launched a free iOS app, SMS/Call Reporter, letting users one-tap report smishing and vishing into corporate incident response pipelines.
22
CISA review makes the case for eliminating vulnerability classes
CISA's FY2024-2025 vulnerability review urges eliminating recurring vulnerability classes, finding 41.5% of 2025 KEV entries map to persistent 'stubborn weaknesses'.
45
NIS2 compliance: Fixing IAM and access control before the 2026 audit
EU NIS2 enforcement deadlines approach; organizations are urged to prioritize service account inventory, lifecycle offboarding, and phishing-resistant MFA before audits.
22
Appears with
- Microsoftvendor · 4
- CISAorganization · 4
- GitHubproduct · 3
- IBMorganization · 3
- Wizorganization · 3
- Microsoftorganization · 3
- NordStellarorganization · 2
- Miasmamalware · 2
- Cloudflareorganization · 2
- Mandiantorganization · 2
- OpenAIorganization · 2
- Vidarmalware · 2
- Passworkvendor · 2
- GitHubvendor · 2
- Huntressvendor · 2
- GitLabproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.