Business ❯ Risk Management

Cybersecurity Risks

Incident Response Software Vulnerabilities Data Protection Ransomware Impact Vulnerability Assessment Operational Risks Supply Chain Attacks Organizational Strategies Operational Impact Vulnerabilities

Invisible Unicode Characters Used to Hide Finance Phishing in Millions of Emails

Inconsistent Unicode handling lets hidden Tag‑block characters split filter keywords, enabling phishing evasion.

JetBrains Patches Critical RCE in TeamCity On‑Premises

Thousands of Internet‑Exposed BMCs Leak IPMI Password Hashes

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

PCPJack Malware Evicts TeamPCP From Cloud Systems and Harvests Credentials

Flowise CVSS 10 Flaw Now Exploited in the Wild as 12,000+ Instances Remain Exposed

FreeScout Zero-Click Flaw (CVE-2026-28289) Enables Full Server Takeover

1Password Rolls Out Browser Pop-Up to Thwart Phishing on Mismatched Sites

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Mexico's New Cybersecurity Plan Faces Scrutiny as Attacks Accelerate

Hyderabad Police Warn of Prompt-Injection Attacks Targeting AI Systems

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

Louvre Heist Exposes Years of Security Failures, Including 'Louvre' as Camera Password

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

CISA Adds Motex Lanscope RCE Flaw to KEV, Citing Active Exploitation

CERT Warns as Shai-Hulud npm Supply-Chain Attack Tops 500 Packages

New Surveys Find Cyberattacks Rising as Staffing Gaps and Underreporting Strain Defenses

Obsidian Details ‘Less Is Safer’ Engineering to Curb Software Supply-Chain Risk

Ransomware Gangs Escalate Extortion With Physical Violence and Regulatory Threats