Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Introducing rogue DHCP discovery in ManageEngine OpUtils. With this new feature, OpUtils lets administrators discover, classify, and continuously monitor DHCP servers across the network directly from the IP Address Manager console.

Data encryption is a way to protect your business data from unauthorized users even if they get access to your apps. Atlassian apps like Jira and Confluence store sensitive information like financial data, intellectual property, and customer details. By implementing Atlassian data encryption, all data sent to and from Atlassian apps gets encrypted, ensuring that it remains safe both in transit (moving between devices & servers) and at rest (stored on servers).

Canada’s critical infrastructure cybersecurity rules are becoming more explicit — and more enforceable. Historically, these organizations have navigated a patchwork of sector-specific requirements, privacy breach reporting rules, regulator guidance, and voluntary frameworks. Bill C-8 raises the stakes by creating statutory cybersecurity obligations for designated operators of critical cyber systems.

Quick answer: What is manufacturing cybersecurity compliance? Manufacturing cybersecurity compliance is the process of aligning a manufacturer’s security controls, documentation, backup practices, incident response workflows and reporting with relevant cybersecurity standards or client requirements. For MSPs, the goal is not to act as legal counsel.

"Exploit mitigation" stalled around 2008. The attacks didn't. AI turns a patched bug into a working exploit in hours. Why endpoint exploit mitigation stalled in 2008, and what a default-on mitigation layer looks like now. The core of my last post was an asymmetry. An attack can unfold in two steps or 20, but the vocabulary it draws from never grows.

AI-enabled attacks move faster than human analysts can track, at a scale that traditional SOCs weren’t designed to withstand. eCrime breakout times collapsed to 29 minutes on average in 2025, with the fastest clocked at 27 seconds. The rise of frontier AI models is expected to compress the time between vulnerability discovery and exploitation, intensifying pressure on SOC teams. Defending against AI-accelerated adversaries requires a new operating model.

Ransomware isn’t just a rising threat, it’s a daily reality for thousands of businesses around the world. These attacks are faster, smarter, and more damaging than ever, with global losses projected to reach $275 billion a year by 2031, according to Cybersecurity Ventures. Understanding how ransomware works is the first step toward stopping it. In this blog, we’ll break down how these attacks unfold and what you can do to defend your systems.

In a fast-moving threat landscape, finding the answers to complex security challenges can be fraught with unknowns. Asking the right questions can make all the difference, as Steven Escobar and Ben Habing know well through their work in the Assessments and Advisory practice within Cyber and Data Resilience at Kroll.

Every major tournament cycle, ticketing platforms brace for a traffic spike. Most security teams plan for volume. The attack data tells a different story: the traffic that does the most damage isn’t the loudest traffic. It’s the traffic that looks like a real fan, on a real device, doing something a real fan would plausibly do, just millions of times, in a pattern no single fan ever would.

Applications using MongoDB have a common pitfall of treating the ObjectId() function as cryptographically secure. Recently, we found Rocket.Chat, an open source Slack-like application, to be a victim of this. At Aikido, we run AI Pentests on various open source applications to test our agents and identify their strengths and improvement points. During the pentest, one of the agents reported that an unauthenticated Rocket.Chat user can access any uploaded file if they know its ID.