InfoSecBulletin Cybersecurity for mankind

Independent security experts have welcomed what’s billed as the first standardized set of SaaS (software as a service) security controls. The SaaS Security Capability Framework (SSCF), launched this week and backed by the Cloud Security Alliance, is designed to close long-standing gaps in third-party risk management. The framework is designed …

In 2025, cyberattacks are increasing in frequency and scale, and 2026 will likely see no relief. New technologies like agentic AI and quantum computing present risks and benefits. Ultimately, humans remain the weakest link and the strongest defense. Experts predict that by 2026, cybercrime could become the world’s third-largest economy …

A critical vulnerability with a perfect 10.0 CVSS score in Fortra’s GoAnywhere Managed File Transfer (MFT) solution was exploited as a zero-day for at least a week before a patch was released. CVE-2025-10035 is a command injection vulnerability enabling remote code execution without authentication. Security firm watchTowr noted evidence of …