Enterprise Security Tech

This guest article was contributed by Alastair Parr, CTO at Spur Organizations have made significant progress in strengthening authentication and securing workforce and customer access. Identity verification, multifactor authentication, device intelligence, behavioral analytics, fraud scoring, bot management, and conditional access policies have all made it harder for attackers to gain access using stolen credentials alone. Identity remains a valuable target, though, and atta

A newly released proof-of-concept exploit suggests Microsoft’s September 2026 security update may not have fully resolved ShieldBreak, a Windows Defender vulnerability that can allow attackers to access sensitive files with SYSTEM privileges. Security researcher Nightmare Eclipse published the new exploit, called ShieldCrash, on GitHub only days after Microsoft issued its ShieldBreak fix. According to the researcher, the proof of concept can read arbitrary files with the high

Cybercriminals are disguising sophisticated malware campaigns as routine recruiting outreach, using fake job descriptions and interview documents to compromise Windows computers with a single click. New research from Cyderes’ Howler Cell threat intelligence team details two separate nine-stage attack chains that exploit the trust surrounding online recruitment. Although the campaigns appear to involve different operators, both use fileless malware, hidden persistence and secu

Meta’s $18 billion settlement with 48 U.S. states could force social media platforms to rethink how they identify underage users without turning age verification into another source of privacy risk. The agreement resolves allegations that Facebook and Instagram harmed young users and violated children’s privacy protections. Beyond its record financial cost, the settlement requires Meta to introduce an age assurance framework with specific accuracy, testing and privacy standar

DeepSeek’s release of V4.1 Flash is sharpening competition in the AI coding market, where falling inference prices and rapidly shifting model rankings are changing what developers should expect from coding assistants. The arrival of faster, lower-cost AI models could make advanced software development workflows more accessible. It could also reduce the value of platforms built around a single model provider. As performance leadership changes hands, developers may increasingly

Manufacturers selling connected hardware and software in the European Union now face strict cybersecurity reporting deadlines under the EU Cyber Resilience Act. The requirements took effect on September 11, 2026, and apply to manufacturers of “products with digital elements” made available in the EU, including companies headquartered outside the bloc. Covered businesses must report actively exploited vulnerabilities and severe security incidents affecting their products throu