Morgan Reid

The 1U DL525 ships first. The eight-GPU DL585a follows in spring 2027, and two dense multi-node systems come later in the year.

A joint advisory issued on October 6 says the operators sell network access to ransomware groups. No CVE is involved, so a firmware update will not evict them.

Two of the September flaws were exploited before a fix existed, and a SAML bug was used against appliances last week. One upgrade now covers all three bulletins.

The campus would be built in four phases from December 2026 to 2036, on the site of a coal plant that closed in 2023.

Attackers are using AI to work faster, not to invent new attacks. That's the consistent finding from threat reports so far, and it shapes where defenders should spend.

FBI ransomware complaints rose to 3,611 in 2025. The controls that stop most attacks are well known, and most of them are cheap. Here is what to check first.

Four changes are reshaping enterprise networks at once. Most of them show up first as contract renewals, so the timing of decisions matters as much as the technology.

Data centers used about 1.5% of the world's electricity in 2024. The International Energy Agency expects that to more than double by 2030, with AI the biggest driver.

Cloud spending is growing faster than it was before the AI boom. The trends that matter for IT budgets in 2026 all trace back to that.

Most cloud breaches come from settings the customer controls, not from the provider. The NSA's list of ten mitigations is the clearest guide to which settings matter.

An AI system can be attacked through its training data, the models it downloads and the text it reads. Each stage of the pipeline needs its own controls.

AI training spreads one job across many GPUs, and the network between them decides how fast it finishes. That has turned data center networking into an AI buying decision.

Each cloud has its own identity system, logs and defaults. Securing several at once comes down to applying one set of rules everywhere, and the NSA has published a good starting list.

Software vulnerabilities have overtaken stolen passwords as the top way attackers get in, according to Verizon's 2026 breach report. Ransomware shows up in almost half of breaches.

In a factory or utility, the first question in an incident isn't what data was stolen. It's whether the physical process is still safe.

An intrusion detection system watches traffic or hosts for signs of attack. It's an old idea that still catches what endpoint tools miss, especially on devices that can't run an agent.

Since December 2023, a material cyber incident at a US-listed company has a four-business-day disclosure clock. That has moved security from an IT budget line to a board agenda item.

OWASP's 2025 Top 10 keeps broken access control at number one and moves software supply chain failures to third. Here is the list, and what to do about it.

Most attacks on mid-size companies use well-known methods. CIS's Implementation Group 1 is a list of 56 safeguards built to stop them.

A SIEM is only as good as the logs it gets and the people tuning it. CISA's guidance reads like a list of the reasons so many deployments disappoint.

The three cloud service models differ in one thing above all: how much of the stack you still run yourself. That decides your staffing, your security work and how you pay.

The most useful decision in a cloud migration is made before any tool is chosen: what happens to each application. AWS's seven Rs give that decision a common vocabulary.

Once a company runs more than one cloud plus its own servers, the hard part is seeing and governing all of it in one place. That's the job of a cloud management platform.

SAST tools scan source code for security flaws before it runs. OWASP's own assessment is that they catch a useful slice of problems, and miss a lot.

NIST's incident response guide went 13 years without an update. The new version treats response as part of everyday risk management, not a separate plan in a drawer.

Laptops and servers are better protected than ever. Attackers have moved to the devices around them: phones, edge appliances and machines no one manages.

Mobile apps put company code and data on devices you don't control. OWASP's mobile standard breaks the problem into eight areas to test against.

Cloud object storage copies your data across several facilities. That protects against hardware failure, not against someone deleting it, which is where most data loss comes from.

SASE combines networking and security into one cloud service. Gartner expects most companies buying SD-WAN to get it as part of a single-vendor platform within a few years.

Cloud cost management used to mean finding idle servers. According to the FinOps Foundation's 2026 survey, almost every FinOps team now manages AI spend as well.

Migrations create security gaps: temporary access that becomes permanent, test data copied without controls, and old systems left running. Most of the risk can be planned out.

SD-WAN started as a cheaper way to connect branch offices. It is now being folded into combined networking and security platforms.

Most attacks now start with a stolen login. CISA's guidance is blunt: SMS codes and push approvals can be beaten, and only phishing-resistant MFA closes the gap.

Wi-Fi 7 certification began in January 2024. Its biggest gains depend on the 6 GHz band and on client devices that support it, which is what decides the timing of an upgrade.

Most cloud arguments are really definition arguments. NIST settled the definition in 2011, and it still sorts out what counts as cloud and what is hosting with a new label.

A SIEM gathers security logs in one place and looks for signs of attack. Whether you need your own depends on who will watch it.

A good network design stops one compromised laptop from reaching everything, and keeps the business running when a link fails. Neither needs exotic equipment.