All articles
-
Bulletproof Hosting: Why Takedowns Keep Failing
Sanctions and server seizures hit bulletproof hosting through 2025 and 2026, yet the infrastructure keeps returning. What actually degrades it.
-
CVE Tracking in 2026: Prioritize When NVD Stops Scoring
NIST moved the NVD to a triage model in April 2026. Here is what CVE tracking and patch prioritization look like when most records never get scored.
-
Standard Chartered's Group CISO on AI's Dual Role in Banking Security
Cezary Piekarski, group CISO at Standard Chartered, says AI is reshaping defensive operations and adversarial tactics simultaneously -- and that banking security leaders must think like business executives to keep pace.
-
OpenAI Security: Bug Bounty Programs and Documented Incidents
OpenAI security in practice: two public bug bounty programs, a coordinated disclosure policy, and the documented incidents recorded from 2023 through 2026.
-
Hotel Wi-Fi Hijacked for Spyware in Midnight Blizzard Campaign
Microsoft attributes the CaptiveCrunch campaign to Storm-2945, a Midnight Blizzard sub-cluster using compromised hotel captive portals to push fake updates.
-
UAC-0145 Uses ClickFix CAPTCHAs to Deploy Malware in Ukraine
UAC-0145 ran ClickFix CAPTCHA lures on 10 or more compromised sites in mid-2026, tricking Ukrainian targets into running PowerShell that stages malware.
-
Netherlands Seizes 800 Servers Over Russian-Linked Hosting
Dutch FIOD agents seized more than 800 servers and arrested two hosting co-owners over EU sanctions tied to the Stark Industries Solutions network.
-
CVSS 10.0 SD-WAN Bypass: What Emergency Directive 26-03 Signals
CVE-2026-20182 is a maximum-severity authentication bypass in Cisco Catalyst SD-WAN, added to CISA's KEV catalog on May 14 amid active exploitation.
-
This Month in Security: May 2026's Edge-Device Reckoning
May 2026 in review: a CVSS 10.0 Cisco SD-WAN bypass under active exploitation, an exploited Exchange XSS flaw, a critical Exim bug, and a quiet Patch Tuesday.
-
Deepfake Cybersecurity: How AI Voice Cloning Reshapes Fraud
Voice deepfake incidents rose 680% in 2025 as attackers clone executives from seconds of audio. Where detection stands and which controls actually hold.
-
Most Remediation Programs Never Confirm the Fix Actually Worked
Mandiant M-Trends 2026 puts mean time to exploit at negative seven days while Verizon's 2025 DBIR finds edge devices take 32 days to remediate.
-
AI Fraud Detection: How It Works and Where It Fails
How AI fraud detection actually works across supervised models, anomaly detection, and graph neural networks, and where attackers and data silos break it.
-
LLM Security Risks: The OWASP Top 10 and How to Defend
A practitioner breakdown of the OWASP Top 10 for LLM applications, from prompt injection to excessive agency, and the controls that reduce real exposure.
-
RubyGems Suspends Signups After Hundreds of Malicious Packages
RubyGems disabled new account registrations on May 12, 2026 after attackers bulk-uploaded hundreds of malicious gems alongside a DDoS on the registry.
-
AI Security Threat Intelligence Hub
The Tech Sentinel index for AI security threat intelligence, covering agentic AI threats, ChatGPT enterprise vulnerabilities, and security workforce dynamics.
-
Generative AI Risks: A Practitioner's Guide to What Matters
Prompt injection, data leakage, hallucinations, and agentic AI risk, mapped against what the NIST, OWASP, and Cisco frameworks actually tell defenders.
-
Machine Learning Security: Key Threats, Attacks, and Defenses
Adversarial attacks, data poisoning, model theft, and supply chain risk against ML systems, plus the NIST and NCSC taxonomies defenders should work from.
-
ChatGPT Security: Key Risks, Vulnerabilities, Enterprise Controls
DNS-based exfiltration, Codex command injection, credential theft, and prompt injection: the ChatGPT risks and the enterprise controls that reduce them.
-
AI Agents Are Rewriting the Threat Model: Are Defenders Ready?
Clinejection, the AI-augmented FortiGate campaign, and the OpenClaw exposure wave show why agentic AI is best treated as an insider-threat problem.
-
Cybersecurity Burnout Is a Structural Problem, Not a Personal One
A Sophos survey of 5,000 practitioners found 76% burnt out, and AI-accelerated vulnerability discovery is stretching an operating model already at its limit.
-
How Tech Sentinel Filters Cybersecurity News
Tech Sentinel covers cybersecurity news with an engineer's filter. Here's what we publish, what we don't, and how to read it.