-
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server’s memory, so the processor keeps reading old encrypted data as if it were current. The attack requires an attacker who already controls the server’s software and can briefly access the machine to insert a small circuit
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing instances as part of a multi-national campaign. “Red Heron scanned 1,386 Gitea instances across seven countries and maintained a separate dataset of 477 Taiwan-based systems,” Acronis Threat Research Unit (TRU) said in an
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
WordPress has announced it’s launching an automated security review for every release of a plugin before it’s distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved. “New plugins are reviewed before they enter the directory, but updates ship continuously after that,” David Perez, WordPress Official Plugin
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The rules of cyber warfare are changing faster than most organizations can adapt.
–Christopher Hogan, Vice President, Vulnerability Management, MasterCard
San Jose, Calif. – Sep. 14, 2026
The cybersecurity landscape in 2026 can best be described as volatile, shaped by evolving geopolitical tensions and the rapid advancement of artificial intelligence (AI). From the battlefield to the boardroom, AI has transformed how people interact with technology, driving productivity and, in some cases, survival.
From a cybersecurity perspective, this acceleration has exposed a blind spot in the industry. AI’s ability to rapidly identify vulnerabilities and scale attack execution has increased the speed and efficiency of cyber operations, compressing the time between discovery and exploitation (Check Point Research, 2026; Google Cloud, 2025). Programs and applications built for today’s environment were not designed for the rapid identification, response, and remediation required by tomorrow’s standards.
Businesses now require a new operating model to manage risk and exposure, one that also strengthens cyber resilience. This is not just about identifying technical weaknesses; it is about understanding the broader impact of operational vulnerabilities within their infrastructure and whether the business can continue to operate when prevention fails. This necessary shift is known as Exposure Management, often operationalized through frameworks such as Continuous Threat Exposure Management (CTEM), introduced by Gartner.
Beyond Vulnerability: The Shift in Mindset
Exposure Management represents a significant departure from the traditional approach to Vulnerability Management (VM).
Vulnerability Management was designed to identify specific flaws. It scans systems, scores weaknesses using standardized metrics such as the Common Vulnerability Scoring System (CVSS), and routes findings through remediation workflows. This model is inherently reactive and focused on known weaknesses.
The modern era of computing has dramatically expanded organizations’ digital estates through cloud computing, SaaS sprawl, and ephemeral assets. The challenge is no longer simply finding vulnerabilities; it is managing an ever-growing inventory of assets, understanding ownership, and identifying how attackers may move through systems via complex attack chains.
Exposure Management, by contrast, focuses on context. It evaluates not only vulnerabilities, but also misconfigurations, identity weaknesses, and environmental factors to determine what is actually exploitable within a given business context (Cymulate, 2026). Rather than asking, “What is vulnerable?”, Exposure Management reframes the question as: “What can realistically be exploited to create business impact, and what does that mean for our ability to sustain critical operations?”
This approach is formalized through Continuous Threat Exposure Management (CTEM), which emphasizes a continuous cycle of discovery, prioritization, validation, and remediation aligned to business outcomes (IBM, 2026; Vectra AI, 2026). Unlike traditional models that rely on periodic scanning, CTEM provides a framework designed to reduce real-world exposure while giving leaders the risk intelligence needed to make resilience-focused decisions.
Why Exposure Management Is Critical Now
The acceleration of AI, particularly Large Language Models (LLMs) and autonomous agents, has introduced a far more dynamic threat environment. Threat actors now have the ability to enhance reconnaissance, automate exploit development, and execute attacks with greater speed and precision across the entire attack lifecycle (Check Point Research, 2026).
AI is no longer simply an efficiency tool; it is a force multiplier for threat actors. Adversaries are increasingly using AI to scale attacks, improve targeting, and reduce the skill barrier required to conduct complex operations (Google Cloud, 2025). This is fundamentally changing the economics of cybercrime.
As a result, organizations can no longer rely on static or periodic security processes. The time-to-exploit window has narrowed significantly, and traditional backlog-driven remediation models are no longer sufficient to keep pace with AI-enabled threats.
This is where Exposure Management becomes a mission-critical component of security, risk, and resilience operations. By focusing on the combinations of weaknesses that create real risk rather than isolated findings, organizations can prioritize what matters most, protect the services that matter most, and respond at the speed required by modern threats.
Implementing the Exposure Model
Transitioning from Vulnerability Management to Exposure Management is not simply a tooling exercise. It requires a fundamental shift in operating models, accountability, and organizational culture.
- Socialize the Change – Exposure Management requires enterprise-wide participation, not just a mandate from security teams. Organizations must move away from siloed, compliance-driven reporting cultures and toward a collaborative model in which security, engineering, and operations jointly own risk reduction. Security must become a shared responsibility that drives coordinated action across the enterprise.
- Redefine Roles and Responsibilities – Team structures must evolve. Traditional vulnerability analysts transition into roles focused on exposure coordination, risk translation, and remediation facilitation. Engineering teams must shift from periodic patch cycles to continuous remediation practices aligned with real-time exposure prioritization.
- Prioritize by Business Criticality – The ultimate goal of Exposure Management is strategic prioritization. Legacy models rely heavily on severity scoring systems such as CVSS, which often lack business context. Exposure Management incorporates exploitability, asset criticality, business impact, and resilience considerations to determine which risks truly matter.
It Is a Sprint, Not a Marathon
Exposure Management challenges every layer of the organization to think differently about risk. It replaces volume-based metrics with outcome-based measurements and shifts the focus from activity to impact.
Leaders who successfully adopt this model gain a critical advantage: the ability to articulate risk in business terms, prioritize effectively, and demonstrate measurable reduction in exposure. More importantly, they gain a clearer view of resilience: where the business is most dependent, where disruption would be most damaging, and which remediation decisions most directly support operational continuity. This capability is becoming increasingly essential in boardrooms, where executives explain not only what vulnerabilities exist, but also how well the organization is prepared to withstand real-world threats.
Organizations that fail to evolve will face increasing exposure not only because of technical weaknesses, but also due to their inability to operate at the speed and scale required in an AI-driven threat landscape.
The time for incremental improvement has passed. The future of cybersecurity demands an accelerated shift toward Exposure Management, supported by continuous, intelligence-driven frameworks such as CTEM and reinforced by the organizational alignment required to operationalize it at scale. Done well, this shift does more than reduce exposure; it helps organizations build the resilience needed to continue operating through disruption.
References
Check Point Research. (2026). Cyber Security Report 2026. Retrieved from https://research.checkpoint.com/2026/cyber-security-report-2026/
Cymulate. (2026). Exposure Management vs. Vulnerability Management. Retrieved from https://cymulate.com/blog/the-move-from-vulnerability-to-exposure-management/
Google Cloud. (2025). Cybersecurity Forecast 2026. Retrieved from https://cloud.google.com/blog/topics/threat-intelligence/cybersecurity-forecast-2026/
IBM. (2026). What is Continuous Threat Exposure Management (CTEM)? Retrieved from https://www.ibm.com/think/topics/ctem
Vectra AI. (2026). CTEM Explained. Retrieved from https://www.vectra.ai/topics/ctem
–Christopher Hogan, Vice President, Vulnerability Management, MasterCard
SPONSORED BY MASTERCARDMastercard works to connect and power an inclusive digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company.
The post Adopting Exposure Management in the Age of AI appeared first on Cybercrime Magazine.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
NATIONAL HARBOR, Md.—Air Force Secretary Troy Meink acknowledged that the U.S. has space weapons, a public revelation that some experts said could accelerate an arms race in orbit.
“Today, we continue to ensure we remain ready to meet the challenges of evolving threats wherever they exist,” Mink said during his Monday morning speech at the Air, Space, Cyber conference here. “This is why the United States now has, on orbit, space-control weapons, capable of defending the joint force against hostile adversaries.”
Top service officials have typically been cagey when asked about U.S. space weapons, often citing national-security concerns. It also marks a major change in rhetoric. John Raymond, the service’s first chief of space operations, proclaimed in 2022 that “our primary purpose is to deter war.”
Defense experts were shocked by Meink’s admission on Monday morning, and said it will likely push the U.S. military’s main adversaries in space to acknowledge their capabilities, too.
“Well, that's huge, because I don't think any US government official has ever said that before,” said Victoria Samson, the Secure World Foundation's chief director of space security and stability. “The US also now has to accept the Chinese and Russians doing/saying the same. I don't think that this is going to be in the interest of US national security.”
Meink did not provide additional details on what type of on-orbit weapons the U.S. possesses.
Kinetic weapons, such as missiles, can create debris by destroying a target. Numerous top military officials have warned against using such weapons.
“Our commitment to responsible space operations is fundamental to our mission assurance and our role as stewards of the space environment,” Maj. Gen. Chris Povak, deputy director of the National Reconnaissance Office, said earlier this year.
Samson said that narrows her guess about what Meink was talking about.
“I'm going to guess what he's talking about is not a kinetic space-control weapon due to multiple comments government officials have said about avoiding debris causing counter space,” she said. “So I'm going to go with my first guess: space-based jammers, electronic warfare.”
Meink also made several other space-related announcements in his speech. The Air Force secretary said prototypes for the space-based Airborne Moving Target Indicator satellite constellation will be launched this month.
Meink also said that space-based interceptors, the cornerstone technology of President Donald Trump’s Golden Dome missile defense system, are now “flight ready.”
Last month, Space Force Gen. Michael Guetlein, Golden Dome’s direct-reporting program manager, warned that the missile defense project would be in dire straits if Congress can’t prioritize additional funding for the effort. The four-star general also said that initial development on space-based interceptors is underway and that the service has executed two “phenomenally successful” tests.
“All of the providers that are part of the competition are progressing exceptionally well,” Guetlein told reporters at the Space and Missile Defense Symposium.
“As everybody knows, there have been many who are developing capabilities to take those away from us, to threaten those things,” Meink said. “So, it is critically important that we maintain our dominance not only in the air but in space, and so that we've had to take steps to make sure that when we're threatened, we can take care of that.”
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own. That is not a great combination. The rest of the week is more familiar: old bugs still working, fresh exploit chains, exposed systems, weak defaults, and simple paths that should have been harder to abuse. A few of
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
This week in cybersecurity from the editors at Cybercrime Magazine
Sausalito, Calif. – Sep. 14, 2026– Read the Full Story in Forbes
AI has fundamentally changed what a cyberattack looks like. A Forbes article reports that tools, speed and sophistication that once required nation-state resources are now available to anyone with a credit card and a cloud account.
At the same time, the businesses MSPs (managed service providers) and MSSPs (managed security service providers) serve face a security leadership gap the market cannot close on its own: A 2026 report published by Cybersecurity Ventures in partnership with Sophos found “only 35,000 CISOs worldwide serving an estimated 359 million businesses”—a 100:1 ratio with no near-term path to resolution.
And the regulatory and insurance environment is tightening, creating documentation and compliance obligations most SMBs cannot meet alone.
These forces have converged into a perfect storm, and MSPs sit at the center of a defining opportunity, provided they build their operations around the opportunity now, according to Michael George, CEO of Syncro, a SaaS company specializing in PSA and RMM software for managed service providers (MSPs) and IT teams.
Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.
The post The CISO Gap Is A Huge SMB Cybersecurity Opportunity For MSSPs appeared first on Cybercrime Magazine.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
There’s a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbub. Vulnerability discovery is getting faster and happening at a much greater scale, while defenders still have to work out which findings actually deserve their action. In the first half of 2026, a whopping 35,853 CVEs were published, roughly 49% more than in the
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Skunk Works, Lockheed Martin’s secretive research arm, plans to build four more of its experimental, multipurpose drones as the firm attempts to sell its futuristic platform to the U.S. military.
Last year, Skunk Works unveiled Vectis—a concept for a group 5 drone that’s capable of a wide range of missions. Now, on the first day of the Air & Space Force Association’s defense conference near Washington, D.C., company officials announced they’re making significant progress on the prototype and are already planning to expand the fleet for more tests.
“We are moving forward with a plan to build an additional four vehicles, bringing a total of five to include the original prototype,” said Ron Fehlen, Skunk Works’ vice president and general manager. “Development work on those additional aircraft is already underway, and we'll have more specifics to share soon.”
Company officials shared new images of the Skunk Works combat drone with reporters ahead of this week’s Air, Space and Cyber Conference. Vectis will be roughly 34 feet long and have a 38-foot wingspan, and will feature a submerged engine inlet and a tail-less body to reduce drag and mission flexibility,” Fehlen said. While Lockheed was eager to talk about the aircraft’s design, the Skunk Works vice president was tight-lipped about who the specific customer for the new aircraft could be, and didn’t provide details on the weapons loadout, propulsion system, or estimated cost of the platform. The Air Force, Marine Corps, and Navy are all aiming to field collaborative combat aircraft.
“From an affordability standpoint, which we're always looking at, and, of course, are targeting to be the CCA competitive price. So we're very cognizant of it and make trades associated with that, Fehlen said. “It's obviously, I think, focused more on the CCA side of the house, and obviously the price points that are highly relevant in that regime.”
Fehlen said the company remains on track to fly Vectis by “the end of 2027.” He said Skunk Works feels confident in that timeline, due in part, to the use of digital designs and “minimal tooling determinant assembly”—which the Skunk Works vice president likened to ready-to-assemble furniture with pre-drilled holes.
“It's a technique that really enables an increased level of affordability and speed through really reducing the amount of touch labor required and increasing the first pass yield,” Fehlen said. “We've seen in many cases an 80 percent reduction in labor hours to build up the aircraft itself.”
While Fehlen wouldn’t specify one specific U.S. program or customer Vectis is geared toward, he did say it could work with any of Lockheed Martin’s fighter jets, which are also flown by other nation’s militaries.
“I'll point to the fact that we have a long history in crewed tactical systems that, you know, Vectus is going to need to integrate with, in addition to other fighter aircraft that are produced around the world,” Fehlen said. “So, from our perspective, this is in line with our heritage and what we're producing today and delivering to the field. It has incredible capability, and now we're going to be able to add this to it.”
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly identified Cyclops Blink variant has resurfaced on compromised Cisco Secure Firewall Management Center (FMC) appliances, adding active internal-network scanning and programmable packet-sniffing capabilities to an already mature modular implant. Assessed with high confidence that the activity has a Russian nexus, with a moderate-confidence link to IRON VIKING also tracked as Sandworm and Seashell […]
The post Sandworm-Linked Cyclops Blink Returns With Network Scanning and Packet-Sniffing Capabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
