Business ❯ Risk Management

Cybersecurity Risks

Incident Response Vulnerability Assessment Organizational Strategies Vulnerabilities Supply Chain Attacks Operational Risks Incident Response Plans Operational Impact Third-party Risks Stress in the Workplace Software Vulnerabilities Data Protection Vulnerability Exploitation Financial Impact Operational Security Data Security Ransomware Impact Organizational Response AI Integration Impact on Organizations Impact on Operations Ransomware Attacks Supply Chain Risks Phishing Attacks Security Audits Data Exposure Data Exfiltration Patch Management

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

The agency says the bugs let attackers gain root or upload executable PHP, enabling automated compromise of shared hosting and Joomla sites.

PCPJack Malware Evicts TeamPCP From Cloud Systems and Harvests Credentials

Flowise CVSS 10 Flaw Now Exploited in the Wild as 12,000+ Instances Remain Exposed

FreeScout Zero-Click Flaw (CVE-2026-28289) Enables Full Server Takeover

1Password Rolls Out Browser Pop-Up to Thwart Phishing on Mismatched Sites

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

Louvre Heist Exposes Years of Security Failures, Including 'Louvre' as Camera Password

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

CISA Adds Motex Lanscope RCE Flaw to KEV, Citing Active Exploitation

New Surveys Find Cyberattacks Rising as Staffing Gaps and Underreporting Strain Defenses

Obsidian Details ‘Less Is Safer’ Engineering to Curb Software Supply-Chain Risk

Ransomware Gangs Escalate Extortion With Physical Violence and Regulatory Threats

Play Ransomware Gang Hits 900 Organizations with Evasive New Tactics