Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

In 2020, the SolarWinds compromise showed how far attackers can go when they look legitimate. Instead of breaking in loudly, threat actors tampered with trusted software updates and gained access that appeared routine to many defenses. The U.S. government later assessed that roughly 18,000 customers installed affected Orion updates, and a smaller subset experienced follow-on intrusion activity, often discovered only after time had passed.

Secrets don’t just leak from Git. They accumulate in filesystems, env vars, and agent memory. See how to find them, stop the bleed, and protect your whole supply chain.

Over the past year, Bitsight TRACE has identified 14,220 unique internet-exposed Open Platform Communications Unified Architecture (OPC UA) servers globally. Given OPC UA's critical role as a communication backbone for modern industrial control systems (ICS) across numerous sectors, this level of exposure warrants a closer look. Our analysis reveals that over half (51.74%) of these devices allow unauthenticated access, while 80.26% transmit data in plaintext without encryption or integrity protection.

The largest CCPA settlement in California history isn’t a story about a company that ignored privacy. It’s a story about what happens when doing the right things isn’t the same as making sure the right things have been done right.

Modern software development has a fundamental problem: we are writing code faster than we can secure it. This creates security debt, a quantifiable backlog of unaddressed vulnerabilities that lingers for over a year. Much like financial debt, it compounds interest over time, but the currency is risk. Despite increased investment in security tools, this backlog is growing, not shrinking. With security debt reaching a critical mass in 2026, organizations must shift their strategy.

Too many organizations today still rely on "legacy" retainer models. These traditional contracts are often rigid, opaque, and reactive, and designed for a world that no longer exists. That’s why LevelBlue is proud to announce the Resilience Retainer. This is a modern, flexible approach built on our experience of handling more than 9,000 cyber incidents worldwide. This up-to-date approach is a necessity, given the long-lasting impact an incident can have.