Category desk

Research

Technical deep dives, reproducible tests, and tool evaluations.

Security operations analysts using AI automation dashboards that reduce data-breach costs and shorten incident lifecycles

Defensive AI Cuts Breach Costs by $1.9 Million and Shrinks Attack Lifecycles by 80 Days

Drawn from 600 breached organizations, the figures are converting abstract AI hype into concrete budget justification for CISOs facing machine-speed attackers.

European financial board reviewing ICT risk packs and Register of Information data during a DORA liability audit discussion

Cloud Security Research

DORA Board Liability Audits: Why Personal Exposure Is Now Live Across the EU

After the 2026 Register of Information cycles, operational resilience is no longer a checkbox a board can safely delegate to the CIO or a third party.

Diagram-style illustration of indirect prompt injection spreading from a poisoned email or document into an enterprise AI agent’s tools.

Cloud Security Research

Indirect Prompt Injection Puts Enterprise AI Agents at Risk—and Filters Alone Will Not Stop It

Assume injection succeeds, then contain it with architecture, least privilege, isolation and monitoring rather than betting the estate on a single classifier.

Illustration of AI-discovered open-source vulnerabilities flowing into a human-and-AI triage clearinghouse that produces signed remediated packages

Cloud Security Research

AI Automated Vulnerability Orchestration in Open Source: Clearinghouses After the Discovery Flood

With NVD enrichment stalled and bounty programs closing, coordination is shifting to systems that turn findings into rebuildable artifacts before exploits land.

Editorial illustration of a dark-web leak dashboard over an electronics plant silhouette

Cloud Security Research

Tata Electronics Cyberattack Exposes Apple and Tesla Hardware Secrets in Pure Data Extortion Campaign

Tata said production was unaffected, but the 630GB dump shows pure-extortion crews extracting leverage from contract manufacturers instead of encrypting them.

Editorial illustration representing the Finnish police wanted notice for Aleksanteri Kivimäki after the Vastaamo conviction became final

Cloud Security Research

Finnish Police Issue Wanted Notice for Aleksanteri Kivimäki After Supreme Court Finalises Vastaamo Sentence

Convicted of aggravated data breach and mass patient extortion, Kivimäki is believed to be outside Finland as authorities move to return him to Vantaa Prison.

Editorial illustration of a Microsoft Defender privilege-escalation race condition elevated after CISA KEV listing for ransomware use

Cloud Security Research

BlueHammer Zero-Day Microsoft Defender Flaw Escalates to Ransomware Priority After CISA KEV Listing

BlueHammer is a time-of-check to time-of-use race, not memory corruption. Estates below Antimalware Platform 4.18.26030.3011 face an operational deadline.

Editorial illustration of identity-based ransomware entry via compromised credentials leading toward domain compromise

Cloud Security Research

Compromised Credentials Overtake Vulnerabilities as Primary Ransomware Entry Point

Across 661 incident-response cases, 67 percent of root causes were identity-related — a decisive shift in where ransomware defence budgets should now sit.