Acronis has published a checklist defining six required capabilities for MSP ransomware protection services, spanning exposure reduction, early detection, round-the-clock incident response, isolated backup preservation, clean recovery, and consistent enforcement across all client tenants. The guidance draws on Acronis's Cyberthreats Report, which documented 143 ransomware victims among MSPs, IT service providers and telecoms in 2025, with phishing responsible for 52% of initial breaches and unpatched systems for 27%.
bleepingcomputer.com
· 2026-09-02
A security researcher describes building a new memory architecture for LLM agents used in vulnerability research, after noticing that standard retrieval-based memory let models keep reasoning from facts that had since been disproven. Instead of just storing and retrieving past observations, the system tracks logical dependencies between facts, so that when one assumption is invalidated, everything derived from it can be automatically flagged or revised. The approach effectively borrows ideas from program analysis, treating an investigation's knowledge state like a dependency graph rather than a flat log of conversation history.
pwning.systems
· 2026-08-28
A wave of vulnerability reports produced with AI assistance is flooding bug bounty programs, increasing supply and pushing per-report payouts lower. This shift is squeezing the economics that independent security researchers rely on for income.
darkreading.com
· 2026-08-28
NIST has responded to a surge in vulnerability disclosures by reclassifying about 30,000 CVEs published before March 2026 as 'Not Scheduled,' effectively deprioritizing their enrichment. The move comes as Action1's 2026 report shows disclosed vulnerabilities in enterprise software jumped 92% in 2025, with critical and high-severity flaws each up 103% and remote-code-execution bugs up 128%.
bleepingcomputer.com
· 2026-08-28
At Black Hat USA 2026, security researchers and reporters focused heavily on the risks posed by agentic AI systems and mounting concerns over the future of the CVE vulnerability-tracking program. Discussions centered on how AI is reshaping vulnerability disclosure and security research practices industry-wide.
darkreading.com
· 2026-08-27
PaperCut has disclosed that hackers are actively exploiting an unpatched vulnerability affecting every version of its PaperCut NG and PaperCut MF print management software. The company confirmed real customer incidents, discovered the flaw after reproducing it with data from an affected university, and has since issued emergency patches for internet-facing servers.
bleepingcomputer.com
· 2026-08-27
CISA has issued an emergency directive requiring federal agencies to fix a Zimbra vulnerability, tracked as CVE-2026-73570, within just three days. The flaw is severe enough that exploitation could give an attacker complete control over a victim's email and communications.
darkreading.com
· 2026-08-24
GoKawiil