Business ❯ Risk Management

Cybersecurity Risks

Incident Response Incident Response Plans Third-party Risks Ransomware Impact Impact on Organizations Software Vulnerabilities Ransomware Attacks AI Integration Vulnerabilities Vulnerability Assessment Supply Chain Risks Supply Chain Attacks Stress in the Workplace Financial Impact Operational Risks Organizational Response Security Audits Operational Security Impact on Operations Phishing Attacks Operational Impact Data Security

FreeScout Zero-Click Flaw (CVE-2026-28289) Enables Full Server Takeover

Version 1.8.207 closes a Unicode-based patch bypass used to trigger code execution via email.

Stories older than 24h

1Password Rolls Out Browser Pop-Up to Thwart Phishing on Mismatched Sites

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

Louvre Heist Exposes Years of Security Failures, Including 'Louvre' as Camera Password

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

CISA Adds Motex Lanscope RCE Flaw to KEV, Citing Active Exploitation

New Surveys Find Cyberattacks Rising as Staffing Gaps and Underreporting Strain Defenses

Obsidian Details ‘Less Is Safer’ Engineering to Curb Software Supply-Chain Risk

Ransomware Gangs Escalate Extortion With Physical Violence and Regulatory Threats

Play Ransomware Gang Hits 900 Organizations with Evasive New Tactics