Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

SecurityScorecard Weekly Brief: The Driftnet Edition on Critical Infrastructure - Gilad F. Maizles

In this week’s Weekly Brief: The Driftnet Edition, Cyber Researcher Gilad F. Maizles breaks down new SecurityScorecard research powered by the company’s acquisition of Driftnet, exposing widespread internet-facing risk inside a U.S. municipal utility provider that also operated as the town’s ISP. “Threat actors will always target the lowest hanging fruit.” Using the Driftnet engine, SecurityScorecard identified significantly more internet-facing services and attack paths than traditional methodologies.

Understanding continuous threat exposure management (CTEM)

Continuous threat exposure management, or CTEM, is a five-stage program framework for continuously reducing real-world security exposure. It builds on vulnerability scanning by adding risk-informed prioritization, validation of exposure conditions and control effectiveness, and cross-team mobilization to drive remediation.

Prevent Sensitive Data Exposure With Egnyte AI Safeguards

AI Safeguards help you control what AI can see, share, and do, by protecting sensitive content from AI exposure. AI Safeguards’ coverage extends across Egnyte AI Assistant, to AI agents and our MCP Server. Safeguards are available across Egnyte’s mobile, desktop, and web platforms.

Should You Pay Ransomware Demands? (The Honest Answer)

Should organisations pay ransomware demands? Canvas recently paid after a breach exposed student data. Now US Congress is questioning whether payments should be illegal. In this episode of Razorwire Raw, James Rees tackles the ransomware payment dilemma. Ransomware groups operate like commercial organisations - if they don't honour agreements to delete data after payment, nobody would pay them. Some negotiators have been caught telling attackers what insurance payouts will cover.

Autonomous AI vs Zero-Day Attacks: The New Cybersecurity Shift

For decades, finding a zero-day flaw followed a predictable script: a highly skilled human researcher spent weeks staring at source code, digging for edge cases, and manually stitching together an exploit. In April 2026, Anthropic flipped that script by announcing Claude Mythos. This frontier model didn’t just mark an incremental upgrade; it introduced autonomous, machine-speed vulnerability hunting.

Drupal Core SQL Injection Vulnerability (CVE-2026-9082)

In May 2026, the Drupal Security Team disclosed a critical SQL injection vulnerability affecting Drupal core. The issue, tracked as CVE-2026-9082, affects Drupal installations using PostgreSQL and has been assigned a Drupal security risk rating of 23/25. The vulnerability can be exploited by anonymous users, and Drupal has confirmed that exploit attempts are being detected in the wild.