Security · Top stories
Securing Single Sign-On Against Credential Attacks
Single Sign-On (SSO) systems, while convenient, concentrate risk, as demonstrated by the 2025 University of Pennsylvania breach where a compromised SSO account led to data theft. Organizations must secure SSO by implementing strong password policies and multi-factor authentication to mitigate these risks. This matters because proper SSO security is crucial for protecting multiple systems and user data from credential-based attacks.
Understanding Risks Before Disabling Google Play Protect on Android
Google Play Protect is Android's built-in security system, scanning for malicious apps and providing privacy alerts. Disabling it removes these safeguards, increasing the risk of malware infection and data theft, especially for users who sideload applications.
Pwn.college offers free cybersecurity education platform from Arizona State University
Pwn.college is an educational platform developed by Arizona State University that provides hands-on cybersecurity training. It offers free access to its curriculum, which is also used in university courses, to individuals globally.
tenfold Introduces Real-time Identity Telemetry for Proactive Threat Detection
tenfold announced a new event auditing platform that ingests and analyzes identity event logs in real time. This platform aims to provide proactive defense against sophisticated attacks by monitoring identity events as they happen, moving beyond traditional identity governance.
BleepingComputer to Host Webinar on Google Workspace Breach Autopsies with Material Security
BleepingComputer will host a webinar on September 23, 2026, featuring Material Security and Fireside Consulting LLC, to discuss how Google Workspace breaches occur and effective response strategies. The event will analyze real-world incidents to provide practical security controls for fast-growing companies using Google Workspace.
OONI Probe seeks contributions to internet censorship dataset
OONI Probe is encouraging users to run its tool to measure internet censorship and contribute to its open dataset. The tool checks website blocking, network performance, and the functionality of circumvention tools for messaging apps.
O&O ShutUp10 offers privacy control for Windows 10 and 11 users
O&O ShutUp10 is a free, portable tool that allows users to manage privacy settings in Windows 10 and 11, controlling data sharing and disabling convenience features. It provides a simplified interface for adjusting settings that Microsoft's default configurations might transmit more data than some users prefer.
Tmp.0ut Magazine Releases Volume 5 Featuring Articles on ELF Binaries and Security
Tmp.0ut, a digital magazine focused on low-level programming and security, released its fifth volume. This volume includes articles on topics such as ELF file manipulation, metamorphic viruses, kernel internals, and syscall hook detection, featuring contributions from various authors and an interview with Doug McIlroy.
SecurityWeek and MTSI Offer Cyber Attack Methods Course at ICS Cybersecurity Conference
SecurityWeek and MTSI will host the Cyber Attack Methods (CAM) course for the second time at the 25th Anniversary Industrial Control Systems (ICS) Cybersecurity Conference in October. This hands-on training aims to teach participants how adversaries compromise cyber-physical systems by placing them in the role of an attacker within a vulnerable virtual environment.
Wazuh Integrates AI for Enhanced Security Operations Center Workflows
Wazuh has integrated AI capabilities, including the Wazuh AI Analyst, into its security platform to assist Security Operations Centers (SOCs) in managing high alert volumes and complex investigations. This integration aims to augment human analysts by providing contextual explanations, summarizing findings, and recommending remediation actions, thereby improving threat detection and incident response.
Recovery Readiness Becomes New Standard for Cyber Resilience Amidst Evolving Ransomware Threats
Ransomware attacks increasingly target and succeed in deleting or tampering with backups, highlighting that backup alone is insufficient for disaster recovery. Organizations need to adopt modern resilience strategies that combine secure, immutable backups with rapid recovery capabilities to protect their businesses from prolonged downtime and data loss.
Podcast features Edna Conway on cybersecurity, governance, AI, and supply chain resilience
A podcast episode features cybersecurity expert Edna Conway discussing governance challenges, AI advancements, and supply chain resilience. The discussion provides strategic perspectives for organizations navigating rapid technological change in cybersecurity.
Cloudflare Recognized as Visionary in 2026 Gartner Magic Quadrant for SASE and SSE
Cloudflare has been named a Visionary in both the 2026 Gartner Magic Quadrant for SASE Platforms and the 2026 Gartner Magic Quadrant for Security Service Edge reports. This recognition highlights Cloudflare's architectural approach and its platform's ability to adapt to evolving security challenges, including AI agents and post-quantum threats.
Mandiant's Cyber Snapshot Report highlights human and systemic failures in successful intrusions
Mandiant's new Cyber Snapshot Report indicates that most successful cyber intrusions result from human and systemic failures, not just machine-speed attacks. The report emphasizes shifting from prevention to resilience, anticipating compromise, and securing recovery paths and executive digital footprints. This matters because it suggests a need for organizations to re-evaluate their cybersecurity strategies beyond traditional tool-based prevention.
AWS to Showcase AI-Powered Security Solutions at Black Hat USA 2026
Amazon Web Services (AWS) will present its AI-powered security offerings at Black Hat USA 2026, focusing on autonomous security operations and AI security architectures. The company will demonstrate how its services address enterprise security challenges with machine-speed remediation and AI-driven investigations.