We’re reaching the end of 2025, and looking ahead to 2026, most experts are discussing the latest threats that will shape the year ahead. This year, we’re seeing a new, but not unexpected, shift to autonomous threats driven by state-sponsored actors and AI. 

With that in mind, a new generation of threats, broadly known as autonomous malware, is beginning to reshape how organizations think about cyber risk, detection, and response. These threats don’t behave like the malware that defenders have spent decades learning to identify, and that’s got experts preparing for the new threat landscape. 

This article explains what autonomous malware is, why it matters now, and what experts should watch as these threats evolve.

Read More

In mid-October 2025, the CISA issued one of its most urgent orders yet: Emergency Directive 26-01. The directive calls on all Federal Civilian Executive Branch (FCEB) agencies to immediately mitigate vulnerabilities in devices from F5 Networks following a state-sponsored breach of F5’s systems and access to portions of BIG-IP source code and vulnerability data.

The event underscores a dangerous reality: our most trusted network appliances have become primary targets. This isn’t just a government issue. Every enterprise using F5 technology or comparable edge-device infrastructure faces the same risks.

Read More

A recent exploit involving a new AI-focused browser shone a light on a critical problem–namely, that browser security is a constant issue, and AI is just making that threat more pronounced. Attackers discovered a way to use that browser’s memory features to implant hidden instructions inside an AI assistant. Once stored, those instructions triggered unwanted actions, such as unauthorised data access or code execution.

The event itself is concerning, but the larger lesson is even more important. The line between browser and operating system continues to blur. Every added function feature brings convenience, but also increases the potential attack surface.

For organisations where security and compliance define daily operations, that expansion demands more scrutiny than ever.

Read More