State-backed Russian hacker groups such as Berserk Bear and Energetic Bear infiltrate routers through outdated firmware and default configurations to gain long-term network access — not solely through zero-day exploits.
The volume of monthly discovered security vulnerabilities has surged due to improved AI-powered vulnerability detection; security teams must adjust their response times and prioritize by risk rather than following the Exploitability Index alone.
Microsoft is ending support for SMS and voice authentication in Entra ID from February 2027, forcing enterprises to switch to passkeys as the only remaining native MFA method.
The Commission provides authorities and critical infrastructure operators with interpretation guidelines for a key compliance provision of the NIS2 Directive.
