Most small businesses survive data breaches. Here’s how to make sure yours does too

Paul WagenseilAugust 5, 2026

Despite scary made-up statistics, most small and medium businesses do beat data breaches and ransomware incidents.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Endpoint/Device Security
Precision privilege containment: Eliminating local admin rights without disrupting productivity
Active Directory
The modern path to unified Linux identity security: Securing hybrid infrastructure in a cloud-first world

PODCASTS

Leadership
Say Easy, Do Hard – Performance Through People – Greg Hoffman – BSW #459
Vulnerability Management
Randomness, Grey, Deepseek, Sonicwall, Spice, CaptiveCrunch, eBay, and Aaran Leyland – SWN #604
Application security
Prompting for Patches That Fix Vulns Without Adding New Ones – Keith Hoodlet – ASW #394
AI/ML
AppSec, Shopify-Style; State of Mobile Security; the News – Andrew Dunbar, Kern Smith – ESW #470
Vulnerability Management
Rogue AI, the Bar, Breaches, BMC, Hugging Face, Helmuth von Multke, Ike, Shieldfont, – SWN #603

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

Man holding smartphone with wi-fi sign. Internet, Technology

Endpoint/Device Security

Russia-linked Midnight Blizzard targets hotel Wi-Fi networks in US, Europe

Steve ZurierAugust 4, 2026

Hotel Wi-Fi phishing campaign targets business travelers, Microsoft warns.

Keyv, cacheable npm supply chain attack hits 400-plus packages

Laura FrenchAugust 4, 2026

The attack is believed to be related to Mini Shai-Hulud.

Researchers find ‘agent-to-agent’ privilege escalation in Google’s ADK for Python repo

Laura FrenchAugust 4, 2026

A low-privileged agent triggered by a PR or issue could be led to manipulate a high-privileged agent.

(Credit: monticellllo – stock.adobe.com)

INC Ransomware chains two SonicWall SMA 1000 zero-days in attacks

Steve ZurierAugust 3, 2026

INC ransomware exploits SonicWall zero-days, prompting compromise fears.

(Credit: daily_creativity – stock.adobe.com)

Anthropic Claude models compromised 3 companies during testing

Laura FrenchJuly 31, 2026

OpenAI’s Hugging Face incident disclosure prompted Anthropic to review its own evaluations.

Biological water treatment plant with a round settlers

Critical Infrastructure Security

Unspecified threat actors targeting US water systems, CISA warns

Steve ZurierJuly 31, 2026

CISA reports surge in cyberattacks targeting water utility PLCs.

Threat Management

Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet

Laura FrenchJuly 31, 2026

Amazon linked the campaigns through overlapping C2 indicators, TTPs and code.

Cloud solution architecture. An architect's hands select a database icon from a simple palette of holographic cloud services.

Critical Azure Cosmos DB flaw risked cross-tenant compromise

Steve ZurierJuly 30, 2026

Patched Azure Cosmos DB bug threatened Microsoft and customer databases.

Events