Business ❯ Risk Management

Cybersecurity Risks

Incident Response Supply Chain Attacks Third-party Risks Incident Response Plans Vulnerability Assessment Operational Impact Operational Risks Stress in the Workplace Software Vulnerabilities Vulnerabilities

Flowise CVSS 10 Flaw Now Exploited in the Wild as 12,000+ Instances Remain Exposed

Active probes put thousands of exposed servers at risk despite a September patch.

FreeScout Zero-Click Flaw (CVE-2026-28289) Enables Full Server Takeover

1Password Rolls Out Browser Pop-Up to Thwart Phishing on Mismatched Sites

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Mexico's New Cybersecurity Plan Faces Scrutiny as Attacks Accelerate

Hyderabad Police Warn of Prompt-Injection Attacks Targeting AI Systems

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

Louvre Heist Exposes Years of Security Failures, Including 'Louvre' as Camera Password

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

CISA Adds Motex Lanscope RCE Flaw to KEV, Citing Active Exploitation

CERT Warns as Shai-Hulud npm Supply-Chain Attack Tops 500 Packages

New Surveys Find Cyberattacks Rising as Staffing Gaps and Underreporting Strain Defenses

Obsidian Details ‘Less Is Safer’ Engineering to Curb Software Supply-Chain Risk

Ransomware Gangs Escalate Extortion With Physical Violence and Regulatory Threats

Play Ransomware Gang Hits 900 Organizations with Evasive New Tactics

Amazon Confirms Employee Data Breach via Third-Party Vendor

Microsoft's DDoS Defense Error Worsens Global Service Outage