Cyber & Cloud Security - it-daily.net - Daily relevant IT news for decision-makers

The Race Against Hackers

PHP2Shell: Where Things Stand After the Patch

22. October, 2026 - 16:45

Millions of automated attack attempts, while authorities and website operators take sites offline: Many are now back online. But systems that have missed a critical update remain vulnerable.

Machine-Speed Attacks

AI Models Shrink the Patch Window to Zero

12. October, 2026 - 05:55

According to leading industry reports, vulnerability exploitation has now become the most common way attackers gain access to networks.

Internal Audit

Gartner Names 12 Audit Priorities for 2027

05. October, 2026 - 05:07

According to Gartner, the value of AI investments, pressure on IT governance, and global fragmentation will shape internal audit plans for 2027.

Budget for Preventive Security

Gartner: Five Priorities for CISOs Through the End of 2026

02. October, 2026 - 06:54

Gartner is urging security leaders to take five key steps in the fourth quarter of 2026. Among other recommendations, the research firm advises CISOs to treat AI agents as insider risks and launch post-quantum cryptography pilot projects.

Building IT Resilience

Why Good IT Runs Without the CIO

30. September, 2026 - 05:05

Anyone who checks alerts every morning while on vacation is not necessarily demonstrating exceptional dedication. It may instead indicate that critical processes depend too heavily on a single person. That creates a risk for the entire organization.

Accountability Under Pressure

Cyber Resilience Act: Is the 24-Hour Reporting Deadline Too Much for Businesses?

29. September, 2026 - 05:12

Since September 11, companies have been subject to the 24-hour reporting requirement for IT security vulnerabilities and cyber incidents. While the deadline has been known for some time, there is still heated debate over how practical such a short reporting window really is.

Compliance Under Pressure

How NIS2 and the EU AI Act Are Pushing Corporate Compliance to Its Limits

21. September, 2026 - 05:05

NIS2, the EU AI Act, data protection rules and other digital regulations: Companies are not short on rules. What is often missing is the structure needed to manage them effectively.

Security vulnerability

ChatGPT: Hidden Prompt Could Siphon Gmail Data

13. September, 2026 - 10:33

A vulnerability in ChatGPT allowed data theft via internal servers. OpenAI has deactivated the affected background service.

When Outages Become Normal

Vulnerabilities Are Getting Cheaper, but Downtime Remains Expensive

24. August, 2026 - 07:25

AI is accelerating the search for security vulnerabilities, while attackers are increasingly disabling the very tools designed to stop them. What can still detect an attack when EDR and other security controls have already been taken offline?

No Specific Vendor Identified

Apple Sends New Warnings About Targeted Spyware Attacks

18. August, 2026 - 06:06

Apple has once again issued Threat Notifications to individual iPhone users, warning them that they may have been targeted by highly sophisticated mercenary spyware attacks.