Features

Features provides deeper cybersecurity analysis, expert perspectives and long-form reporting beyond the immediate news cycle. Explore the strategic, technical and business context behind major security developments, emerging technologies, digital risk and cyber resilience, with practical insight for CISOs, security practitioners and technology leaders.

New BlackX UEFI bootkit exploits Baton Drop vulnerability in targeted APT campaign

In early 2026, researchers identified a new UEFI bootkit, dubbed BlackX, that exploits the Baton Drop vulnerability (CVE-2022-21894) in a targeted APT campaign against...

CrowdStrike achieves Enhanced Level assurance from UK NCSC for high-stakes incident response

In a significant development for cybersecurity in the UK, CrowdStrike has achieved Enhanced Level assurance from the National Cyber Security Centre (NCSC) under its...

Microsoft’s Project Perception enhances security for AI agents by implementing continuous risk adaptation and containment strategies

Microsoft's Project Perception aims to enhance security for AI agents by implementing continuous risk adaptation and containment strategies. As AI agents increasingly integrate into...

Top five initial access threat vectors identified by Unit 42 in September 2026

In September 2026, Unit 42 Threat Intelligence identified five primary initial access vectors that underscore the evolving tactics of cyber adversaries. The report highlights...

ARMORY CASTLE exploits CVE-2026-102764 in BeyondTrust Remote Support for persistent access

On October 15, BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, affecting its Remote Support appliances, a tool widely used for secure remote access and troubleshooting....

CyberXero targets Ukrainian energy infrastructure with AI-augmented automated attacks, exposing data of over 628,000 individuals

CyberXero, an AI-augmented initial access broker, has been identified as a significant threat to Ukrainian energy infrastructure, employing automated attacks that have compromised the...

CrowdStrike assists FBI in disrupting FAMOUS CHOLLIMA’s U.S. laptop farm operations

In late September 2026, CrowdStrike's Counter Adversary Operations team collaborated with the FBI to disrupt a network of laptop farms operated by the North...

High-impact vulnerabilities discovered in LiteLLM gateway expose users to remote code execution and credential theft

Recent security assessments of LiteLLM, a popular open-source large language model (LLM) gateway, have uncovered multiple high-impact vulnerabilities that expose users to significant risks,...

Recent Articles

Cyber Warriors Conclave Chapter X — Beyond the Ballroom