mastodon 4.8.0-alpha.3+glitchStoryteller | Cybersecurity | Enterprise Technology | Current meatspace: Minneapolis
Of 48,000+ CVEs in 2025, only 58 met the threshold for genuine supply chain threat — discoverable, exploitable, mapped to real vendor exposure.
The timeline pressure: attackers exploit 7 days before disclosure. Vendor-to-ransomware handoff: 22 seconds. CVSS alone can't solve this.
[link] #infosec #ThirdPartyRisk #SupplyChain
RunSafe's 2026 Medical Device Cybersecurity Index is worth a close read. Procurement standards are genuinely improving — more RFPs include cybersecurity requirements, SBOM expectations have hardened, budgets are growing. And yet attack frequency is up, patient harm is up, and nearly 30% of organizations are still running devices past end-of-support. Better buying practices address the margin. They don't address the installed base. That's the harder problem.
I just paired my smart watch to my coffee cup. What an age to be alive.
If you're an employer and have to force employees into the office through mandates, maybe you should ask yourself why you have to drag your workers back into the environment you created.
Geoffrey Hinton came to Ai4 2026 with a specific warning, and the two people who built the field alongside him spent the next hour disagreeing with it. https://www.cybrsecmedia.com/three-ai-luminaries-one-stage-what-ai4s-keynote-panel-signals-for-enterprise-ai-and-cybersecurity/
Appears Microsoft has decided to circle back to 1999 when it comes to dealing with its software vulnerabilities.
Number of Victims Breached Via MOVEit Zero-Day Keeps Climbing
https://www.databreachtoday.com/number-victims-breached-via-moveit-zero-day-keeps-climbing-a-22573
Still true