Steve Zurier

President Donald Trump issued a national security memorandum on Aug. 12 that said select companies could work with the federal government on offensive

A maximum-severity bug in SAP Commerce Cloud was exploited in the wild, research group Defused posted on X Aug. 14.

CISA's notice follows a familiar pattern in which a flaw gets discovered and patched by a vendor, followed by a report that it was actively exploited, and then confirmation that it's being exploited by ransomware groups.

Three federal agencies reported Aug. 18 that the Medusa ransomware-as-a-service (RaaS) group has attacked more than 500 victims from June 2021 to

Five major agencies of the federal government released a cybersecurity advisory Aug. 19 that unspecified threat actors are mounting AI-assisted

Microsoft warned on Aug. 20 that a maximum-severity deserialization flaw in Entra ID was actively exploited.

Medusa ransomware hit 500-plus victims, exploiting critical flaws at increasing speed.

Experts say teams should make this a priority, noting that the patch has been available since last November.

Attackers moved quickly to exploit a critical SAP Commerce Cloud bug following its patch.

Trump expands private-sector role in U.S. offensive cyber operations, raising governance concerns.