CISOs Face A Tighter Insurance Market in 2026

Gutting CISA won’t just lose us a partner. It will lose us momentum. And in this game, that’s when things break.

Real IDs have been in the works since 2005. Are their security standards still rigorous enough in 2025?

In the fourth of our five-part series, Sophos X-Ops explores threat actors’ real-world criminal business interests

An attacker has been using maliciously crafted PDF files to exploit a zero-day in Adobe Acrobat and Reader for at least four months.

Hackers aren’t kicking down the door anymore. They just use the same tools we use every day — code packages, cloud accounts, email, chat, phones, and “trusted” partners — and turn them against us. One bad download can leak your keys. One weak vendor can expose many customers at once. One guest invite, one link…

Google on Tuesday revealed that its large language model (LLM)-assisted vulnerability discovery framework discovered a security flaw in the SQLite open-source database engine before it could have been exploited in the wild. The vulnerability, tracked as CVE-2025-6965 (CVSS score: 7.2), is a memory corruption flaw affecting all versions prior to 3.50.2. It was discovered by…