Enterprise Cybersecurity Software Fails 20% of the Time, Warns Absolute Security

Infosecurity Magazine

March 24, 2026 at 1:15 PM

Overview

A recent report from Absolute Security reveals that enterprise cybersecurity software is failing to protect organizations about 20% of the time. This failure stems from issues like poor patch management, the growing complexity of IT environments, and the continued reliance on outdated software. These factors put companies at increased risk of cyber threats, potentially leading to data breaches and financial losses. The findings suggest that many organizations may not be adequately prepared to defend against evolving cyber attacks, emphasizing the need for improved security practices. As companies continue to face sophisticated threats, addressing these vulnerabilities becomes increasingly urgent.

Key Takeaways

Affected Systems: Enterprise cybersecurity software, patch management systems, IT environments
Action Required: Organizations should improve patch management practices, update obsolete software, and simplify IT environments where possible.
Timeline: Newly disclosed

Original Article Summary

Poor patch management, increasingly complex IT environments and continued use of obsolete software puts organizations at risk from cyber threats, says the Absolute Security 2026 Resilience Risk Index

Impact

Enterprise cybersecurity software, patch management systems, IT environments

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Newly disclosed

Remediation

Organizations should improve patch management practices, update obsolete software, and simplify IT environments where possible.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Patch.

Read Original Article

Related Coverage

‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems

SecurityWeek

Researchers have discovered a new attack method called 'SymJack' that exploits AI coding agents. By using malicious repositories and deceptive symlinks, attackers can trick these AI systems into installing compromised servers under their control. This allows the attackers to steal sensitive information, disrupt continuous integration pipelines, and inject harmful code into software projects. The implications are significant, especially for companies relying on AI tools for software development, as it exposes them to supply chain attacks that can go unnoticed. Developers and organizations need to be vigilant about the sources of their code and the integrity of the tools they use.

May 27, 2026

GlassWorm Botnet Disrupted

SecurityWeek

Security firms have successfully disrupted the GlassWorm botnet by taking down all four command-and-control channels that the malware relied on. This operation is significant because botnets like GlassWorm can be used by attackers for various malicious activities, such as launching distributed denial-of-service (DDoS) attacks or spreading other malware. By dismantling these C&C channels, researchers have reduced the botnet's ability to control infected devices, which is a win for cybersecurity efforts. This disruption not only impacts the operators of the botnet but also protects potential victims from being exploited. As the threat landscape evolves, ongoing vigilance against such malware remains crucial for both individuals and organizations.

May 27, 2026

Dutch police arrests suspect linked to Ajax football club hack

BleepingComputer

Dutch police have arrested a 35-year-old man in connection with a cyberattack on Ajax Amsterdam, a prominent football club. The hack occurred earlier this year, although specific details about the nature of the attack and the data compromised have not been disclosed. This incident raises concerns about the security measures in place at sports organizations, especially as they handle sensitive information about players, fans, and operations. The arrest is part of ongoing efforts by law enforcement to address cybercrime targeting high-profile entities like sports clubs. As the investigation continues, it serves as a reminder for organizations to strengthen their cybersecurity practices to prevent similar incidents.

May 27, 2026

FBI: Hackers Sending Operatives in Person to Insert USB Drives and Steal Data

SecurityWeek

The FBI has issued a warning about a new tactic being employed by the Silent Ransom Group, which involves sending operatives to law firms to physically insert malicious USB drives into their systems. This method allows hackers to bypass traditional cybersecurity measures, making it easier to steal sensitive data. Law firms are particularly vulnerable due to the confidential information they handle. The FBI's alert emphasizes the importance of employee training and heightened awareness regarding suspicious devices in the workplace. Organizations should review their security protocols to mitigate the risk of such physical infiltration.

May 27, 2026

CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day

SecurityWeek

A recently discovered zero-day vulnerability in the LiteSpeed cPanel plugin has been exploited by attackers to execute scripts with root privileges. This security flaw poses a significant risk to users of LiteSpeed's web server and cPanel, particularly those who have not yet applied the necessary patches. The Cybersecurity and Infrastructure Security Agency (CISA) has urged immediate action to patch this vulnerability, which had been actively exploited before it was resolved last week. Failure to address this issue could leave systems vulnerable to further attacks, potentially compromising sensitive data and system integrity. Users are strongly advised to prioritize updates to safeguard their environments.

May 27, 2026

Cybercriminals increasingly use AI for deepfake-based KYC bypass, report finds

SCM feed for Latest

According to new research from Flashpoint, cybercriminals are increasingly using artificial intelligence to create deepfake technology that can bypass Know Your Customer (KYC) processes. Rather than inventing new AI tools, these threat actors are honing existing technologies to make their attacks more effective. This trend poses a significant risk to financial institutions and companies that rely on KYC protocols to verify customer identities. As deepfakes become more sophisticated, organizations may struggle to differentiate between real and fake identities, leading to potential fraud and security breaches. The report indicates that as these tactics evolve, companies must enhance their verification processes to combat this growing threat.

May 26, 2026